# "kibana\_user" role is able to delete .kibana index

**URL:** <https://discuss.elastic.co/t/kibana-user-role-is-able-to-delete-kibana-index/88576>\
**Category:** Kibana\
**Created:** [June 7, 2017, 12:08pm UTC](https://discuss.elastic.co/t/kibana-user-role-is-able-to-delete-kibana-index/88576 "2017-06-07T12:08:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cornoualis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cornoualis/32/23246_2.png) [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Post date:** [June 7, 2017, 12:08pm UTC](https://discuss.elastic.co/t/kibana-user-role-is-able-to-delete-kibana-index/88576/1 "2017-06-07T12:08:31Z")

</div>

Hi,

I'm managing a multi-user environment and everybody needs to access kibana, so I added them the "kibana-user" role.

But recently, I discovered that **this role is able to manage and even delete the .kibana index**.

I finally created a "kibana-user-nodelete" role that can only read and index the .kibana index.

Would not it be more logical to have two default roles for kibana which would be "kibana-manager" or "kibana-admin" and a "kibana-user" that can't delete the .kibana index?

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [June 9, 2017, 11:19am UTC](https://discuss.elastic.co/t/kibana-user-role-is-able-to-delete-kibana-index/88576/2 "2017-06-09T11:19:03Z")

</div>

if you don't allow any delete permission for the kibana\_user role, an user with that role won't be able to delete any object that he creates (visualization, dashboard, saved searches, etc). So this why the delete action is by default added to the kibana\_user. There will be a new option added in future kibana releases(6.0 actually) that allows you to define view only modes for a role, so that can probably help your situation.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 7, 2017, 11:19am UTC](https://discuss.elastic.co/t/kibana-user-role-is-able-to-delete-kibana-index/88576/3 "2017-07-07T11:19:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.