# User role to just manage the users in Kibana/x-pack security **URL:** \ **Category:** Kibana\ **Created:** [June 19, 2019, 3:28pm UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510 "2019-06-19T15:28:27Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![parallelthought](https://avatars.discourse-cdn.com/v4/letter/p/35a633/32.png) [@parallelthought](https://discuss.elastic.co/u/parallelthought)\ **Post date:** [June 19, 2019, 3:28pm UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/1 "2019-06-19T15:28:27Z")
I would like to create a user whose role has the privilege to only manage the user list or access User Management in Kibana. Could someone please advice me if there is a particular privilege that i need to choose while creating such a role ? Thanks! ---
**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\ **Post date:** [June 19, 2019, 8:52pm UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/2 "2019-06-19T20:52:54Z")
Sounds like you are wanting "feature controls", which will be available in 7.2. ---
**Author:** ![parallelthought](https://avatars.discourse-cdn.com/v4/letter/p/35a633/32.png) [@parallelthought](https://discuss.elastic.co/u/parallelthought)\ **Post date:** [June 21, 2019, 9:51am UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/3 "2019-06-21T09:51:25Z")
Thanks, indeed the "feature control" could take care of what I mentioned. I just hope the "Security" is designated as a stand alone feature in the list. Eagerly waiting to test the final version. ---
**Author:** ![parallelthought](https://avatars.discourse-cdn.com/v4/letter/p/35a633/32.png) [@parallelthought](https://discuss.elastic.co/u/parallelthought)\ **Post date:** [July 5, 2019, 9:31am UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/4 "2019-07-05T09:31:27Z")
I've tried the "feature control" on v7.2 and I'm able to restrict a role to a space and disable all the features except the "Advanced Settings". Unfortunately such a role would allow the user to access the ILM, index management, etc.. too (which I want to avoid). Objective is to let the user/role to just have the ability to manage the Security aspects. Could someone please guide me to the index where the user & role information is stored in ElasticSearch. I could then ring fence a role to that particular index with just read and write permissions. Would welcome other approaches too. Thanks! ---
**Author:** ![parallelthought](https://avatars.discourse-cdn.com/v4/letter/p/35a633/32.png) [@parallelthought](https://discuss.elastic.co/u/parallelthought)\ **Post date:** [July 30, 2019, 10:10am UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/5 "2019-07-30T10:10:03Z")
Was able to achieve this by the following settings: - Create a Space with all the features disabled - Assign a role with access to the above Space - Assign a user to the above role with Cluster Privilege = manage\_security With the above settings, a user will have only access to editing the Security settings ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 27, 2019, 10:10am UTC](https://discuss.elastic.co/t/user-role-to-just-manage-the-users-in-kibana-x-pack-security/186510/6 "2019-08-27T10:10:30Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.