# Kibana spaces **URL:** \ **Category:** Kibana\ **Created:** [January 17, 2019, 3:16pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663 "2019-01-17T15:16:49Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Post date:** [January 17, 2019, 3:16pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/1 "2019-01-17T15:16:49Z")
I have a space I have users in that space I want to make someone admin of that space (user administration, etc) I do not know how to do that ---
**Author:** ![stiltz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stiltz/32/39714_2.png) [@stiltz](https://discuss.elastic.co/u/stiltz)\ **Post date:** [January 17, 2019, 4:18pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/2 "2019-01-17T16:18:44Z")
Here is the guide on securing spaces: [https://www.elastic.co/guide/en/kibana/master/spaces-securing.html](https://www.elastic.co/guide/en/kibana/master/spaces-securing.html) Essentially you need to create a new role and give it the permissions for the space(s) you want it to have read/none/all permissions to and then add your users to the role. ---
**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Post date:** [January 18, 2019, 10:16am UTC](https://discuss.elastic.co/t/kibana-spaces/164663/3 "2019-01-18T10:16:05Z")
I gave the role all privileges ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/d/cdb9217dec6ecb618585bac8fefa17a3886864da.png) But that does not give the user the right to manage users within the space. ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [January 18, 2019, 12:16pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/4 "2019-01-18T12:16:00Z")
Hey @JPelastic It's not possible to allow user management within a specific space. Spaces are a concept within Kibana only, but users area cluster-wide concept. User management is enabled by granting the `manage_security` cluster privilege to a role. Any user with this privilege can use the User/Role Management screens within Kibana. ---
**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Post date:** [January 18, 2019, 3:14pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/5 "2019-01-18T15:14:40Z")
Yes! But sadly that means he can also touch the users outside of the space. ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [January 18, 2019, 7:09pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/6 "2019-01-18T19:09:12Z")
Right, because users don't belong to a space, they belong to the cluster. You can create users without _any_ access to Kibana, and that's a perfectly valid thing to do. ---
**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Post date:** [January 21, 2019, 7:19am UTC](https://discuss.elastic.co/t/kibana-spaces/164663/8 "2019-01-21T07:19:39Z")
Thanks Larry But then... we're using Spaces as a way to partition our Kibana access to different customers. And they are asking for a way to manage their users within the Space. Any hints on what we could do? ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [January 22, 2019, 12:13pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/9 "2019-01-22T12:13:07Z")
The only way I'm aware of to segment your users at this point is to give each customer their own cluster. Currently, anyone with the [`manage_security`](https://www.elastic.co/guide/en/elastic-stack-overview/current/security-privileges.html#privileges-list-cluster) cluster privilege is able to manage all users and roles. You could also use a different identity provider via SAML, LDAP, or AD. With those, you can create your own user management facilities outside of Kibana ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 19, 2019, 12:13pm UTC](https://discuss.elastic.co/t/kibana-spaces/164663/10 "2019-02-19T12:13:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.