I think I am going slightly mad. I have created what I thought is a read only role but the user has the ability to create/delete spaces.
The permissions set using the kibana UI are:
Cluster privileges : None
Index privileges: logstash-* privileges: read
Spaces : I have set Read on Discover and dashboard and the rest are none
feature display is set to just Dashboard and discover
I login as this user I can see the Management area where I can amend/create & delete spaces. Is there a setting I have missed that prevents read only users from creating\deleting spaces
We will be having two teams accessing Kibana where one of the teams should not be making any changes to the system other than creating their own visuals and adding them to either the group dashboard or their own one.