# One user can delete other users dashboard, visualizations, graphs and index patterns. I want to avoid this, so that one user can only delete its own created stuff

**URL:** https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434
**Category:** Kibana
**Created:** [February 28, 2020, 1:17pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434 "2020-02-28T13:17:48Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)
#### Post date: [February 28, 2020, 1:17pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/1 "2020-02-28T13:17:48Z")

</div>

We have created multiple users for Kibana and we have given access of ALL for our dashboards, graphs, index patterns and visualizations. The problem is that one user can also delete other users created dashboards, graphs, index patters and visualization.Is there any way so that one user can not delete other users dashboards, graphs, index patterns and visualizations. If its not possible then how can we refrain one user to don't delete other user's created stuff (dashboard, visualization, save objects) ?

---

<div class="post-metadata">

### Author: ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)
#### Post date: [February 28, 2020, 2:07pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/2 "2020-02-28T14:07:07Z")

</div>

Dear @owais, welcome to the Discuss forum!  
The recommended way to handle these situations is to create separate spaces (one per user, plus maybe a shared playground) that will restrict users not in the space from manipulating other users' work. You can read more about using spaces [here](https://www.elastic.co/guide/en/kibana/master/xpack-spaces.html#xpack-spaces). Please note that the link refers to the current `master` branch in Kibana. You may need to change to the relevant documentation for the branch/release you are working with.

 ![release_version](https://us1.discourse-cdn.com/elastic/original/3X/3/e/3e6b944815365022d5cccfc9160b790bd47badb8.jpeg)

---

<div class="post-metadata">

### Author: ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)
#### Post date: [February 28, 2020, 4:26pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/3 "2020-02-28T16:26:42Z")

</div>

I have created two spaces in two roles and two users. Now one user can't see another user's stuff.  
what i want is that one user should be able to read other users stuff but should not be able to delete their stuff, though he can delete his own stuff.  
If this is possible then how can we do that?

Looking forward to your quick response.

---

<div class="post-metadata">

### Author: ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)
#### Post date: [February 28, 2020, 4:35pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/4 "2020-02-28T16:35:42Z")

</div>

For users to see shared items, these items will need to be in the 'playground' space. You can then create read only roles for the shared space. Each users' items can be [copied to the shared space](https://www.elastic.co/guide/en/kibana/7.6/xpack-spaces.html#spaces-moving-objects).  
Please note that assigning multiple roles to a user does have some [tricky aspects](https://www.elastic.co/guide/en/kibana/7.6/xpack-security-authorization.html).  
I hope that helps!

---

<div class="post-metadata">

### Author: ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)
#### Post date: [February 28, 2020, 5:12pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/5 "2020-02-28T17:12:44Z")

</div>

The point you raised about 'playground' space is considered as shared space. The following issue is open in github.

> <https://github.com/elastic/kibana/issues/27004>
>
> Requirements
> Currently, Kibana only supports the ability to copy a saved-object to multiple-spaces. When copying a saved-object, all copies are separate saved-objects...

---

<div class="post-metadata">

### Author: ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)
#### Post date: [February 28, 2020, 5:48pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/6 "2020-02-28T17:48:28Z")

</div>

Yes, copies are direct copies of the item at the time of copying it to another space. It will be the responsibility of a user who modifies an item to update the copy in the shared space. While I guess this isn't the desired behavior in some situations, it does provide a mechanism to allow viewing items in different spaces.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 27, 2020, 5:48pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434/7 "2020-03-27T17:48:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
