# Minimum security priviliges for import object API?

**URL:** <https://discuss.elastic.co/t/minimum-security-priviliges-for-import-object-api/277888>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [July 5, 2021, 11:51pm UTC](https://discuss.elastic.co/t/minimum-security-priviliges-for-import-object-api/277888 "2021-07-05T23:51:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Post date:** [July 5, 2021, 11:51pm UTC](https://discuss.elastic.co/t/minimum-security-priviliges-for-import-object-api/277888/1 "2021-07-05T23:51:49Z")

</div>

Hi,

I need to automatically import dashboards using the import object API. This is all working fine with a account that has full user permissions but I like to lock down the user.

What are the minimum permissions a user needs to create and delete objects? I don't think its mentioned in the docs.

> **[Import objects API | Kibana Guide \[7.13\] | Elastic](https://www.elastic.co/guide/en/kibana/current/saved-objects-api-import.html)**

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [July 16, 2021, 7:10pm UTC](https://discuss.elastic.co/t/minimum-security-priviliges-for-import-object-api/277888/2 "2021-07-16T19:10:23Z")

</div>

Hi, when importing a dashboard, other saved objects that the dashboard links to will be imported as well. The "actual minimum" privileges for the role depends on what type of saved objects are linked to in the dashboard. The user needs to have `all` application privileges for the features related to the saved object that get created on import.

For example, if importing a dashboard with a map included, you need `all` access to the Dashboard feature and Maps feature.

An easier way to define a role that can import any kind of saved object would be to grant `all` privilege to the "Saved Objects Management" feature:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1b2899902c708cbf3cde27161916dca640bced45.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 13, 2021, 7:11pm UTC](https://discuss.elastic.co/t/minimum-security-priviliges-for-import-object-api/277888/3 "2021-08-13T19:11:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.