# Is there anything that i can do to hide the user and role details who donot belong to the space from the admin of that space?

**URL:** <https://discuss.elastic.co/t/is-there-anything-that-i-can-do-to-hide-the-user-and-role-details-who-donot-belong-to-the-space-from-the-admin-of-that-space/233846>\
**Category:** Kibana\
**Created:** [May 22, 2020, 4:41am UTC](https://discuss.elastic.co/t/is-there-anything-that-i-can-do-to-hide-the-user-and-role-details-who-donot-belong-to-the-space-from-the-admin-of-that-space/233846 "2020-05-22T04:41:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ankitaniket](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@ankitaniket](https://discuss.elastic.co/u/ankitaniket)\
**Post date:** [May 22, 2020, 4:41am UTC](https://discuss.elastic.co/t/is-there-anything-that-i-can-do-to-hide-the-user-and-role-details-who-donot-belong-to-the-space-from-the-admin-of-that-space/233846/1 "2020-05-22T04:41:58Z")

</div>

I have a default space in kibana where i am creating admin for secondary spaces they have the access to create users in there own spaces. Now I on logining in as the admin of the other space am able to view the details of users and roles who donot belong to this space. Can i hide the details of users and roles not belonging to that space from the admin of that space.

---

<div class="post-metadata">

**Author:** ![lukeelmers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukeelmers/32/35230_2.png) [@lukeelmers](https://discuss.elastic.co/u/lukeelmers)\
**Post date:** [May 25, 2020, 4:45pm UTC](https://discuss.elastic.co/t/is-there-anything-that-i-can-do-to-hide-the-user-and-role-details-who-donot-belong-to-the-space-from-the-admin-of-that-space/233846/2 "2020-05-25T16:45:02Z")

</div>

> Can i hide the details of users and roles not belonging to that space from the admin of that space.

This isn't currently possible, because users and roles do not really "belong" to a Space -- the privileges assigned to roles in Kibana are based on the [Elasticsearch cluster privileges](https://www.elastic.co/guide/en/elasticsearch/reference/7.8/security-privileges.html#privileges-list-cluster), whereas Spaces is a Kibana-only feature.

So if you give someone access to `manage_security`, they are going to be able to manage all users & roles for the cluster regardless of Space, because Elasticsearch has no awareness of Spaces. This means they can either manage users/roles via Kibana, or by performing requests against Elasticsearch directly.

Some of those roles might have certain space privileges assigned, but those space privileges do not affect the overarching Elasticsearch privileges which have already been granted.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 22, 2020, 4:45pm UTC](https://discuss.elastic.co/t/is-there-anything-that-i-can-do-to-hide-the-user-and-role-details-who-donot-belong-to-the-space-from-the-admin-of-that-space/233846/3 "2020-06-22T16:45:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.