# Prevent to create global exceptions for space user

**URL:** <https://discuss.elastic.co/t/prevent-to-create-global-exceptions-for-space-user/389911>\
**Category:** Elastic Security\
**Created:** [August 25, 2026, 12:00pm UTC](https://discuss.elastic.co/t/prevent-to-create-global-exceptions-for-space-user/389911 "2026-08-25T12:00:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![adamsmesher](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adamsmesher/32/146799_2.png) [@adamsmesher](https://discuss.elastic.co/u/adamsmesher)\
**Post date:** [August 25, 2026, 12:00pm UTC](https://discuss.elastic.co/t/prevent-to-create-global-exceptions-for-space-user/389911/1 "2026-08-25T12:00:03Z")

</div>

Any ability to prevent users from another space from creating "global" exceptions? Goal is to add permissions to add endpoint exceptions only for policies which related only to specific space.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/f/5f77614aeeef7f59e70a1cc7ee2b8b3ac09bd21d.jpeg)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/1/11bf4ea8f01bb50e31e2f86e989505bdf52a636f.png)

---

<div class="post-metadata">

**Author:** ![adamsmesher](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adamsmesher/32/146799_2.png) [@adamsmesher](https://discuss.elastic.co/u/adamsmesher)\
**Post date:** [August 25, 2026, 12:30pm UTC](https://discuss.elastic.co/t/prevent-to-create-global-exceptions-for-space-user/389911/2 "2026-08-25T12:30:02Z")

</div>

Resolved. I miss this setting.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/f/dfbf6b21eb4490a48cca9f432e06c6c7ad286d0e.png)