# Superuser requirement for managing endpoints breaks multitenancy **URL:** \ **Category:** Elastic Agent\ **Tags:** elastic-stack-security\ **Created:** [July 21, 2022, 4:43pm UTC](https://discuss.elastic.co/t/superuser-requirement-for-managing-endpoints-breaks-multitenancy/310323 "2022-07-21T16:43:30Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![tmahany419](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmahany419/32/102898_2.png) [@tmahany419](https://discuss.elastic.co/u/tmahany419)\ **Post date:** [July 21, 2022, 4:43pm UTC](https://discuss.elastic.co/t/superuser-requirement-for-managing-endpoints-breaks-multitenancy/310323/1 "2022-07-21T16:43:30Z")
The superuser requirement to isolate hosts (I think its required for anything under manage endpoints) as well as the requirement to see all spaces to manage fleet means you cannot have a truly multitenant environment. You cannot have an admin of a single space. These are the permissions I am referring to: ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/7/f708837fb3bdc105d54a334b280e2652670160f1.png) > **[Host isolation | Elastic Security Solution \[8.3\] | Elastic](https://www.elastic.co/guide/en/security/8.3/host-isolation-ov.html)** ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64a585ab5bf04f4f306d4b4bc240811e422c556c.png) > **[Centrally manage Elastic Agents in Fleet | Fleet and Elastic Agent Guide \[8.3\]...](https://www.elastic.co/guide/en/fleet/8.3/manage-agents-in-fleet.html)** Is there a workaround for this? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 18, 2022, 4:44pm UTC](https://discuss.elastic.co/t/superuser-requirement-for-managing-endpoints-breaks-multitenancy/310323/2 "2022-08-18T16:44:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.