# Roles permissions/privileges

**URL:** <https://discuss.elastic.co/t/roles-permissions-privileges/376984>\
**Category:** Elastic Security\
**Created:** [April 10, 2025, 7:04am UTC](https://discuss.elastic.co/t/roles-permissions-privileges/376984 "2025-04-10T07:04:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsng/32/142537_2.png) [@jsng](https://discuss.elastic.co/u/jsng)\
**Post date:** [April 10, 2025, 7:04am UTC](https://discuss.elastic.co/t/roles-permissions-privileges/376984/1 "2025-04-10T07:04:11Z")

</div>

i need to define a user role with the ability to only access security dashboard in kibana to see alerts but not to see rules or other things.  
i have tried the below permissions, but i can't see the security UI board.

```auto
PUT /_security/role/testrole
{
  "cluster": [],
  "indices": [
    {
      "names": [
        ".alerts-security.alerts-default"
      ],
      "privileges": [
        "read",
        "view_index_metadata"
      ],
      "allow_restricted_indices": false
    },
    {
      "names": [
        ".alerts-security.alerts-tw-*"
      ],
      "privileges": [
        "read",
        "view_index_metadata"
      ],
      "allow_restricted_indices": false
    }
  ],
  "applications": [
    {
      "application": "kibana-.kibana",
      "privileges": [
        "feature_security.read",
        "feature_security.alerts.read"
      ],
      "resources": [
        "space:tw"
      ]
    }
  ],
  "run_as": [],
  "metadata": {},
  "transient_metadata": {
    "enabled": true
  }
}

```

would appreciate some pointers.

---

<div class="post-metadata">

**Author:** ![yago82](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yago82/32/97755_2.png) [@yago82](https://discuss.elastic.co/u/yago82)\
**Post date:** [April 14, 2025, 8:43am UTC](https://discuss.elastic.co/t/roles-permissions-privileges/376984/2 "2025-04-14T08:43:18Z")

</div>

Hi,

according the role definition, users with this role can only access the Security app in the **tw** space.

Regards