# No way to set ML access in roles

**URL:** https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276
**Category:** Kibana
**Tags:** elastic-stack-machine-learning
**Created:** [April 29, 2020, 1:08am UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276 "2020-04-29T01:08:02Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![seanziee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/seanziee/32/45151_2.png) [@seanziee](https://discuss.elastic.co/u/seanziee)
#### Post date: [April 29, 2020, 1:08am UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/1 "2020-04-29T01:08:02Z")

</div>

Not sure if I'm missing something super obvious, but when I try and create my custom role that will only show dashboard and ML tabs/apps, I get the note that:  
`To grant users access, you should also assign either the machine_learning_user or machine_learning_admin role.`

I get it, and it's useful to know, but how can I then make this role include the ML tab as well? There's no where to click!

---

<div class="post-metadata">

### Author: ![seanziee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/seanziee/32/45151_2.png) [@seanziee](https://discuss.elastic.co/u/seanziee)
#### Post date: [April 29, 2020, 1:12am UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/2 "2020-04-29T01:12:18Z")

</div>

![Screen Shot 2020-04-28 at 6.11.46 PM](https://us1.discourse-cdn.com/elastic/original/3X/4/6/463313d9016ef5d8ecf846f203d0bef12212e091.png)

---

<div class="post-metadata">

### Author: ![sophie\_chang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sophie_chang/32/18008_2.png) [@sophie\_chang](https://discuss.elastic.co/u/sophie_chang)
#### Post date: [April 29, 2020, 9:50am UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/3 "2020-04-29T09:50:20Z")

</div>

Hi @seanziee

We are working on it, but ML is not yet space aware. Privileges must be given to the user in Kibana Management / Users and Roles.

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7ea1bd5352ba8560b38f09beeb89d323ffe08e92.png)

A full list of privileges for ML is here [https://www.elastic.co/guide/en/machine-learning/current/setup.html#setup-privileges](https://www.elastic.co/guide/en/machine-learning/current/setup.html#setup-privileges)

Hope this helps  
Sophie

---

<div class="post-metadata">

### Author: ![seanziee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/seanziee/32/45151_2.png) [@seanziee](https://discuss.elastic.co/u/seanziee)
#### Post date: [April 29, 2020, 3:03pm UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/4 "2020-04-29T15:03:15Z")

</div>

@sophie_chang how would I set up a user to only see the ml tab and the dashboard tab for example?

---

<div class="post-metadata">

### Author: ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)
#### Post date: [April 29, 2020, 6:21pm UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/5 "2020-04-29T18:21:55Z")

</div>

Create a Kibana space (called "Analysts") in which only the ML and Dashboard tabs are visible:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/9/9947eddfbbf98199058d8fb2274f5c65000a6488.png)

Create a role (perhaps called "analysts") in which that role is mapped to that specific Kibana space, and give the necessary privileges:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/e/8e351c53555b55c6e7fcb390d215108a651758d2.png)

Create a user (perhaps called "analyst") that is mapped to that "analysts" role, but also adds the `machine_learning_user` to their role

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/7/87fc6ae9055c5c4f15f690dcca03dcfcc78483e1.png)

when the user `analyst` logs in, they will see:

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c09c4f15e3aefb04f966bc53b4f15b5354c8db8.png)

---

<div class="post-metadata">

### Author: ![seanziee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/seanziee/32/45151_2.png) [@seanziee](https://discuss.elastic.co/u/seanziee)
#### Post date: [April 29, 2020, 7:18pm UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/6 "2020-04-29T19:18:39Z")

</div>

Awesome, thanks!!!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 27, 2020, 7:18pm UTC](https://discuss.elastic.co/t/no-way-to-set-ml-access-in-roles/230276/7 "2020-05-27T19:18:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.