# ML Jobs Permissions

**URL:** https://discuss.elastic.co/t/ml-jobs-permissions/229578
**Category:** Elasticsearch
**Tags:** elastic-stack-machine-learning
**Created:** [April 24, 2020, 5:55am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578 "2020-04-24T05:55:17Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![KoettingSimon](https://avatars.discourse-cdn.com/v4/letter/k/ba9def/32.png) [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)
#### Post date: [April 24, 2020, 5:55am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/1 "2020-04-24T05:55:17Z")

</div>

Hi All,  
Im playing arround with the ML-Feature of the Elastic Stack.  
We use our Stack with multiple Kibana Spaces/Indicies.  
So person A has access to Index A and Space A, person B has access to Index B and Space B and so on.  
If i now add Person A to the machine\_learning\_user Role Person A can also see the Jobs an the Results of Person B.  
As i understand that shouldnt be possible.

> To _view_ the configuration, status, and results of the machine learning features, you must have:
> 
> - `machine_learning_user` or `machine_learning_admin` built-in roles
> - `read` and `view_index_metadata` index privileges on source indices

> **[Set up machine learning features | Machine Learning in the Elastic Stack \[7.6\]...](https://www.elastic.co/guide/en/machine-learning/7.6/setup.html#setup-privileges)**

So but the Users can see jobs running on indicies there dont have any permission on.

Im i missunderstanding the Documentation?

Thanks,  
Simon

---

<div class="post-metadata">

### Author: ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)
#### Post date: [April 24, 2020, 8:24pm UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/2 "2020-04-24T20:24:23Z")

</div>

> [@Kibana Spaces and machine learning](https://discuss.elastic.co/t/kibana-spaces-and-machine-learning/225292/2):
>
> Hi - it is because the ML jobs are not "Kibana Space aware" just yet. The ML team is working on it and expect support for Kibana Spaces soon.

---

<div class="post-metadata">

### Author: ![KoettingSimon](https://avatars.discourse-cdn.com/v4/letter/k/ba9def/32.png) [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)
#### Post date: [April 24, 2020, 8:50pm UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/3 "2020-04-24T20:50:15Z")

</div>

Hi @richcollier,  
Thanks for your reply.  
But I'm not wondering why I can see a job created in space A in Space B. I'm wondering why a user with only privileges on Index A can see results from a ML Job based on Index B.  
I quoted a part of the documentation in my question. Is in this case the source index the ml-results index?? Otherwise there is a bug or a misstake in the documentation.  
I would understand the source index as the index where the ml-job get it's data from.

---

<div class="post-metadata">

### Author: ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)
#### Post date: [April 27, 2020, 11:35am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/4 "2020-04-27T11:35:50Z")

</div>

The results of ML jobs go into `.ml-anomalies-*` indices. By default, they go into a `.ml-anomalies-shared` index unless the ML job is configured to use a "dedicated" results index (sets the `results_index_name` in the config).

See: [How to separate Machine Learning jobs in Kibana per user](https://discuss.elastic.co/t/how-to-separate-machine-learning-jobs-in-kibana-per-user/124756/3)

---

<div class="post-metadata">

### Author: ![KoettingSimon](https://avatars.discourse-cdn.com/v4/letter/k/ba9def/32.png) [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)
#### Post date: [May 19, 2020, 8:28am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/5 "2020-05-19T08:28:15Z")

</div>

Hi,  
sorry for the late answer 😃  
I will start to do it with the multiple indicies as you described.  
One last question, today i found in Kibana Management -\> ML Job List this:  
 ![grafik](https://us1.discourse-cdn.com/elastic/original/3X/c/e/ce8189acb36c9c432b0101921f2d7704b024340f.png)

What is this "setting/info" for and how can i change these?  
Im using Kibana v7.6.1

---

<div class="post-metadata">

### Author: ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)
#### Post date: [May 19, 2020, 11:22am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/6 "2020-05-19T11:22:52Z")

</div>

Currently, you cannot do anything with ML Jobs and Kibana Spaces as the work is still in progress ([https://github.com/elastic/kibana/issues/64172](https://github.com/elastic/kibana/issues/64172)).

This column on the UI must have been inserted in anticipation of that upcoming support for ML jobs to be "Spaces aware"

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 16, 2020, 11:22am UTC](https://discuss.elastic.co/t/ml-jobs-permissions/229578/7 "2020-06-16T11:22:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
