# Kibana Roles

**URL:** <https://discuss.elastic.co/t/kibana-roles/112900>\
**Category:** Kibana\
**Created:** [December 21, 2017, 9:57pm UTC](https://discuss.elastic.co/t/kibana-roles/112900 "2017-12-21T21:57:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kunam](https://avatars.discourse-cdn.com/v4/letter/k/3d9bf3/32.png) [@kunam](https://discuss.elastic.co/u/kunam)\
**Post date:** [December 21, 2017, 9:57pm UTC](https://discuss.elastic.co/t/kibana-roles/112900/1 "2017-12-21T21:57:50Z")

</div>

Hi,

I'm running my kibana on ECE cluster. I have created a new user, he should only able to watch logs on kibana and should perform any other operations in kibana. These are the following roles attached to kibana user, watcher use, watcher admin, remote monitoring agent to it. But he is not able to watch any of the logs.

Then i change the roles, and I have attached kibana super user role. Now he is able to watch the logs

So, user who only has "super user kibana" permission can view the logs?? is there any other role that which I can add to user, so that he can view the logs.

I appreciate your help.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [December 29, 2017, 12:26pm UTC](https://discuss.elastic.co/t/kibana-roles/112900/2 "2017-12-29T12:26:37Z")

</div>

Hi,

> [@kunam](#):
>
> he should only able to watch logs on kibana and should perform any other operations in kibana.

I am assuming that you want your user to only read logs here and not perform any write actions. Can you please check if you have given read privilege for your role on your logs index?

> **[Granting Privileges for Indices & Aliases | X-Pack for the Elastic Stack...](https://www.elastic.co/guide/en/x-pack/current/securing-aliases.html)**

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![kunam](https://avatars.discourse-cdn.com/v4/letter/k/3d9bf3/32.png) [@kunam](https://discuss.elastic.co/u/kunam)\
**Post date:** [January 2, 2018, 3:18pm UTC](https://discuss.elastic.co/t/kibana-roles/112900/3 "2018-01-02T15:18:26Z")

</div>

Thank you! @bhavyarm

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 30, 2018, 3:18pm UTC](https://discuss.elastic.co/t/kibana-roles/112900/4 "2018-01-30T15:18:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
