# Restrict Kibana users to only see some APM service.environment in APM UI

**URL:** https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784
**Category:** APM
**Tags:** ui
**Created:** [April 13, 2020, 2:52pm UTC](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784 "2020-04-13T14:52:40Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![caue.marcondes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/caue.marcondes/32/61739_2.png) [@caue.marcondes](https://discuss.elastic.co/u/caue.marcondes)
#### Post date: [April 14, 2020, 10:06am UTC](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784/2 "2020-04-14T10:06:53Z")

</div>

Hi @Agzem, how are you doing?

I believe you can achieve what you want by creating a new `Role` for each user and specifying the field `Grant read privileges to specific documents`, like the image below:

 ![Screenshot 2020-04-14 at 11.57.57](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bcfc1371a86f9b6ef84451a639e86165b052b497.png)

As you can see I created a new Role which grants read privileges to `apm-*` but only for `production` environment.

You can read more about it in the [document-level-security](https://www.elastic.co/guide/en/elasticsearch/reference/master/document-level-security.html) page.

---

_[View the full topic](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784)._