# Kibana 6.7.2 User & Space Management

**URL:** <https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890>\
**Category:** Kibana\
**Created:** [May 27, 2019, 10:34am UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890 "2019-05-27T10:34:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![biji\_padhy](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@biji\_padhy](https://discuss.elastic.co/u/biji_padhy)\
**Post date:** [May 27, 2019, 10:34am UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/1 "2019-05-27T10:34:24Z")

</div>

Hi All,

I am looking for some help in setting up few user accounts in kibana 6.7.2. I have explained my requirement below.

There are 3 spaces A, B, C & 2 users x, y.

1. How can we assign kibana dashboard only user role to user x for the space A.  
User X should not be able to view other spaces B & C.

2. There are few pre-existing visualizations & dashboards in space A. user x is having read-only access to these object.  
But user x should be able to create new visualizations & dashboards. However he should not be able to edit/delete any of the pre-existing objects which are not created by him.  
What should be the role assignment for user x for this case?

Basically, on a space, user x should have update access only to the objects created by him, but can't alter the visualizations created by any other user.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [May 27, 2019, 8:20pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/2 "2019-05-27T20:20:01Z")

</div>

Hello,

You can do part of this using a combination of roles/ and spaces.

 ![42%20PM](https://us1.discourse-cdn.com/elastic/original/3X/c/a/caa6bf3f2b079452f69c7650a3594d75525a50a5.png)

If you create a role - give it space a privileges only - user won't be able to see saved objects in space b & c.

Unfortunately you won't be able to do this. If user x can create new vizs and dashboards on the same index pattern - then she will definitely have access to the data to be able to read saved objects created on it. This will work only if the user x won't have field privileges on the existing saved objects.

> [@biji\_padhy](#):
>
> There are few pre-existing visualizations & dashboards in space A. user x is having read-only access to these object.  
> But user x should be able to create new visualizations & dashboards. However he should not be able to edit/delete any of the pre-existing objects which are not created by him.  
> What should be the role assignment for user x for this case?

Hope this helps. This is our documentation about it.

> **[Introducing Kibana Spaces for Organization and Security](https://www.elastic.co/blog/introducing-kibana-spaces-for-organization-and-security)**
>
> New in 6.5, organize your dashboards, visualizations, and other saved objects with Kibana Spaces.

> **[Spaces | Kibana Guide \[7.1\] | Elastic](https://www.elastic.co/guide/en/kibana/7.1/xpack-spaces.html)**

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![biji\_padhy](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@biji\_padhy](https://discuss.elastic.co/u/biji_padhy)\
**Post date:** [May 29, 2019, 6:27am UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/3 "2019-05-29T06:27:09Z")

</div>

Thanks Bhavya. Your reply helped.

---

<div class="post-metadata">

**Author:** ![ShilpaT](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shilpat/32/43553_2.png) [@ShilpaT](https://discuss.elastic.co/u/ShilpaT)\
**Post date:** [June 6, 2019, 12:43pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/4 "2019-06-06T12:43:20Z")

</div>

Hi, I have a similar scenario as described by biji\_padhy.  
I have ELK version 6.7.2 installed and am looking for ways to implement role management in it. As shown in the picture above, 'Management / Users / Create', I can't see the Users options in my version. Is that a plugin installed separately or am I missing something here?

Side note : \*\* I am new to ELK and Kibana.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [June 6, 2019, 2:19pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/5 "2019-06-06T14:19:37Z")

</div>

Hi,

So you need to enable security plugin. Please follow this documentation:

[https://www.elastic.co/guide/en/elastic-stack-overview/6.7/get-started-enable-security.html](https://www.elastic.co/guide/en/elastic-stack-overview/6.7/get-started-enable-security.html)

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 4, 2019, 2:19pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890/6 "2019-07-04T14:19:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
