# Kibana user privileges

**URL:** <https://discuss.elastic.co/t/kibana-user-privileges/206834>\
**Category:** Kibana\
**Created:** [November 6, 2019, 4:26pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834 "2019-11-06T16:26:48Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![joseja](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@joseja](https://discuss.elastic.co/u/joseja)\
**Post date:** [November 6, 2019, 4:26pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/1 "2019-11-06T16:26:48Z")

</div>

Hi,

With Kibana spaces and user/role privileges, is there a way in which I can give users permission to create new visualizations/dashboards, but at the same time making sure that the user doesnt have right to delete any existing visualization?

Or, is there a way in which I can specify read privileges on individual dashboards/visualizations?

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 12, 2019, 5:05am UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/2 "2019-11-12T05:05:35Z")

</div>

Yes , on version 7.4 this can be achieved by using feature privileges. Kibana privileges grant users access to features within Kibana. Roles have privileges to determine whether users have write or read access. More info on the settings and how to achieve it here:

[https://www.elastic.co/guide/en/kibana/7.4/kibana-privileges.html#kibana-feature-privileges](https://www.elastic.co/guide/en/kibana/7.4/kibana-privileges.html#kibana-feature-privileges)

Hope this helps  
Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![joseja](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@joseja](https://discuss.elastic.co/u/joseja)\
**Post date:** [November 12, 2019, 12:44pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/3 "2019-11-12T12:44:42Z")

</div>

Thanks for the reply.

Not sure if my question was clear enough..

I was wondering if there is a way in which the feature privileges can be defined for individual dashboards. Say, if I have 10 dashaboards in space X, can I give a user only read access to the 10 dashboards, but write access for any new dashboards they would want to create ?

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 13, 2019, 3:04am UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/4 "2019-11-13T03:04:17Z")

</div>

> [@joseja](#):
>
> bo

@Larry_Gregory can you please shed more light ?

Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [November 13, 2019, 8:39am UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/5 "2019-11-13T08:39:28Z")

</div>

Hey @joseja,

Thanks for the question. Unfortunately, this is not currently possible, but it’s planned. The functionality you’re looking for is being referred to as “object level security” — we have plans to work on this, but haven’t committed to a timeline or release version. You can follow along and track our progress here: [https://github.com/elastic/kibana/issues/39259](https://github.com/elastic/kibana/issues/39259)

The details of the implementation are likely to change, so don’t take the linked description as the final design.

---

<div class="post-metadata">

**Author:** ![joseja](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@joseja](https://discuss.elastic.co/u/joseja)\
**Post date:** [November 13, 2019, 12:46pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/6 "2019-11-13T12:46:13Z")

</div>

Thanks guys..

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 11, 2019, 12:46pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834/7 "2019-12-11T12:46:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.