# In Cloud service, How to add Space Creation/Deletion privs to role

**URL:** <https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [March 17, 2020, 6:50am UTC](https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855 "2020-03-17T06:50:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![lmit](https://avatars.discourse-cdn.com/v4/letter/l/c68b51/32.png) [@lmit](https://discuss.elastic.co/u/lmit)\
**Post date:** [March 17, 2020, 6:50am UTC](https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855/1 "2020-03-17T06:50:58Z")

</div>

I am trying to configure a role that can Read Dashboards + create/delete Spaces.

Dashboard is easy, but the Space privilege has me scratching my head.

Is this possible in the Cloud service Kibana UI?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e9365424c69c150bb7db268514ed5af2af7ff6a0.png)

---

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [March 17, 2020, 11:14am UTC](https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855/2 "2020-03-17T11:14:52Z")

</div>

Hey @lmit,

I completely understand why this is leaving you confused! We are currently "hiding" the space management privileges behind the "Global all" privilege. This means that in order to manage spaces, you need to be assigned a role which grants "All" access to the "Global" resource (This is equivalent to granting the built-in `kibana_user` role):

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/9/19e4c1a087067abef73b9cf5ce4245a031f16ec0.png)

This is something we want to change though. Feel free to follow along at [https://github.com/elastic/kibana/issues/51759](https://github.com/elastic/kibana/issues/51759), and add your use-case there if it's not already captured.

---

<div class="post-metadata">

**Author:** ![lmit](https://avatars.discourse-cdn.com/v4/letter/l/c68b51/32.png) [@lmit](https://discuss.elastic.co/u/lmit)\
**Post date:** [March 17, 2020, 11:45am UTC](https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855/3 "2020-03-17T11:45:11Z")

</div>

Thank you for the prompt response! So no fine-grained control possible for my use case.

I will deliberate on how insecure it will be for embeded dashboard-only users to have privilege of kibana\_user.

Regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 14, 2020, 11:45am UTC](https://discuss.elastic.co/t/in-cloud-service-how-to-add-space-creation-deletion-privs-to-role/223855/4 "2020-04-14T11:45:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.