# Only access to Management Kibana: Spaces, Users and Roles **URL:** \ **Category:** Kibana\ **Created:** [August 27, 2020, 12:28pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615 "2020-08-27T12:28:33Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![ErwinEnableU](https://avatars.discourse-cdn.com/v4/letter/e/ce73a5/32.png) [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Post date:** [August 27, 2020, 12:28pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/1 "2020-08-27T12:28:33Z")
Hi community, for certain Users I would like to know how to configure Kibana management in such a manner that these Users only have acces in Kibana Management to: - Spaces: to create and modify - Users: to create and modify - Roles: to Clone and modify an existing Role - Saved Objects to Export to Spaces and to Export, for migration to another Elasticcloud I don't want these users to have access in Kibana management to: - Everything under the header Elasticsearch - Index Patterns - Alerts and Actions - Reporting - Advanced Settings - Logstash Pipelines - Beats Central Management - API Keys - Role Mappings - Machine Learning Jobs List I could only find the role 'superuser', which has access to the items I would like, but this role has too much rights. ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [August 28, 2020, 5:16am UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/2 "2020-08-28T05:16:16Z")
To grant users access to a subset of spaces or features, you can create a custom role that grants the desired Kibana privileges. More documentation and how to create the roles and users is defined here [https://www.elastic.co/guide/en/kibana/current/xpack-security-authorization.html](https://www.elastic.co/guide/en/kibana/current/xpack-security-authorization.html) hope it helps Rashmi ---
**Author:** ![ErwinEnableU](https://avatars.discourse-cdn.com/v4/letter/e/ce73a5/32.png) [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Post date:** [September 4, 2020, 7:56am UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/3 "2020-09-04T07:56:17Z")
Dear Rashmi, thank you for your answer. It is helpfull. However I am not quite there yet. I would like certain users to be able to create a new Space. The only role I can find is "superuser" who has this privilege, but i am reluctant to provide this superuser role to those users. Do you have another great suggestion for me? ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [September 4, 2020, 4:55pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/4 "2020-09-04T16:55:53Z")
Thank you for your reply. We will have to dig a little deeper into this. Am copying our security experts on this thread. cc @Larry_Gregory @jportner ---
**Author:** ![jportner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jportner/32/75692_2.png) [@jportner](https://discuss.elastic.co/u/jportner)\ **Post date:** [September 4, 2020, 5:15pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/5 "2020-09-04T17:15:24Z")
> [@ErwinEnableU](#): > > However I am not quite there yet. I would like certain users to be able to create a new Space. The only role I can find is "superuser" who has this privilege, but i am reluctant to provide this superuser role to those users. Do you have another great suggestion for me? You can use the `kibana_admin` role instead. This is much more restricted than the `superuser` role. It doesn't give access to any Elasticsearch indices, but it does give access to _everything_ in Kibana, which might not be desirable. There is an open issue related to this: [Add "Space management" feature · Issue #51759 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/51759) That enhancement will add a special "Space management" Feature in Kibana, so a more restricted role can be used to create and edit Spaces. You may want to subscribe to that issue for updates. Hope that helps, -Joe ---
**Author:** ![ErwinEnableU](https://avatars.discourse-cdn.com/v4/letter/e/ce73a5/32.png) [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Post date:** [September 8, 2020, 7:33am UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/6 "2020-09-08T07:33:26Z")
Thank you Joe. I have commeted on github issue. With the `kibana_admin` role I am able to start, but a role in which I can manage the Management Authorization per item would be much appriciated. 😉 ---
**Author:** ![jportner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jportner/32/75692_2.png) [@jportner](https://discuss.elastic.co/u/jportner)\ **Post date:** [September 8, 2020, 1:51pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/7 "2020-09-08T13:51:03Z")
@ErwinEnableU Great! Until that enhancement is implemented, that's the most minimally-privileged role you can create that allows a user to create/modify Spaces. Being that we have the open enhancement issue, would you consider this topic to be resolved? ---
**Author:** ![ErwinEnableU](https://avatars.discourse-cdn.com/v4/letter/e/ce73a5/32.png) [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Post date:** [September 9, 2020, 6:21am UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/8 "2020-09-09T06:21:31Z")
Hi Joe, Yes this issue is closed for now. I am looking forward to the solution that is being developed. Any thoughts about in which version I can expect the solution? ---
**Author:** ![jportner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jportner/32/75692_2.png) [@jportner](https://discuss.elastic.co/u/jportner)\ **Post date:** [September 9, 2020, 12:47pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/9 "2020-09-09T12:47:28Z")
Unfortunately I can't comment on timelines, but it's good that you added a comment to the issue, as that helps us prioritize our backlog! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 7, 2020, 12:47pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615/10 "2020-10-07T12:47:45Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.