# Logs UI along with spaces **URL:** \ **Category:** Logs\ **Created:** [April 17, 2019, 7:26am UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212 "2019-04-17T07:26:12Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![sl1729](https://avatars.discourse-cdn.com/v4/letter/s/ba8739/32.png) [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Post date:** [April 17, 2019, 7:26am UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/1 "2019-04-17T07:26:12Z")
I created a space called 'dev' and then created objects like index-pattern, visualization and dashboards etc .. And then a role with read permission to that space and read access to the related indexes. Created a user 'dev-user' under that role. But now when I login as admin [navigate to the dev space], I am able to view the the logs in Logs UI. But when login as dev-user [navigate to the dev space], I am only seeing message " Looks like you don't have any metrics indices.". Even though I am able to view the dashboards without problem with all visualizations. How can I provide dev-user access to view the logs in Logs-UI ?. ---
**Author:** ![simianhacker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simianhacker/32/3383_2.png) [@simianhacker](https://discuss.elastic.co/u/simianhacker)\ **Post date:** [April 18, 2019, 3:10pm UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/2 "2019-04-18T15:10:11Z")
@sl1729 For the Infrastructure UI, the users will need read permission for the `metricbeat-*` indices (in Elasticsearch). The index patterns (not Kibana index pattern but the pattern used to match the data in Elasticsearch) are described here: [https://www.elastic.co/guide/en/kibana/current/infrastructure-ui-settings-kb.html](https://www.elastic.co/guide/en/kibana/current/infrastructure-ui-settings-kb.html) Users will need to read access to the indices listed in `xpack.infra.sources.default.metricAlias` and `xpack.infra.sources.default.logAlias`. If you need to use different index patterns per space, you can set these values using the settings UI for both the Infrastructure UI and Logs UI. Whatever these values are set to, the user will need read access to the matching indices. ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/7/27d132aa27b6cc899dde67371cf1eba3ef476138.png) ---
**Author:** ![sl1729](https://avatars.discourse-cdn.com/v4/letter/s/ba8739/32.png) [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Post date:** [April 22, 2019, 7:31am UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/3 "2019-04-22T07:31:59Z")
Apology to not mention it in previous post. I am using 6.6.2 version of the stack. "xpack.infra.sources.default.logAlias" setting is set to logs-\* (this is the index under which filebeat logs are redirected). metric beat index is the default one. After I give access to index logs-\* and metricbeat-\*, I get the below error, when navigating to either Logs UI or Infrastructure UI. "Error: GraphQL error: [security\_exception] action [indices:admin/aliases/get] is unauthorized for user [appl-user]" ---
**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\ **Post date:** [April 23, 2019, 8:39am UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/4 "2019-04-23T08:39:19Z")
In order to support the use of aliases, the infra ui currently requires the `manage` permission on the alias name and the target indices. ---
**Author:** ![sl1729](https://avatars.discourse-cdn.com/v4/letter/s/ba8739/32.png) [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Post date:** [April 24, 2019, 3:31am UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/5 "2019-04-24T03:31:11Z")
Thanks for the reply, I tested and it is working. But with the manage access and having the dev tools option available, the developer is also able to drop or modify the index. Hope we should be able to achieve it with only read permission in future. ---
**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\ **Post date:** [May 8, 2019, 2:23pm UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/6 "2019-05-08T14:23:03Z")
Hm, that is true. You could check whether the `view_index_metadata` permission is sufficient, because the Logs UI doesn't really need write access to the aliases. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 5, 2019, 2:23pm UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212/7 "2019-06-05T14:23:17Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.