Kibana 6.5.1 in Elastic Cloud
When you have a User with > kibana_dashboard_only_user and a Role
That user has access to all spaces even though the Role only has read on one space.
My role has a indies and Privileges read and one space set as read.
I tested this by removing the Kibana_dashboard_only_user and then my user only had access to the one Space.