# X-pack kibana\_user role conflicting with spaces permissions **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security, elastic-stack-reporting\ **Created:** [December 6, 2018, 8:14am UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676 "2018-12-06T08:14:58Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Post date:** [December 6, 2018, 8:14am UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/1 "2018-12-06T08:14:59Z")
Hi, No idea where I should post this as the x-pack forum appears to be locked... I got my users set up with spaces permissions so they can only view the spaces the have access to. Works fine. The problem is that these users are allowed to generate reports and we have a custom logo. But for the custom logo to show up in reports, a user MUST have access to the kibana\_user role. But a user with access to kibana\_user automatically can see all spaces on login... Another issue is that even if a user has minimum rights, they can still do things such as access the advanced settings page. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 6, 2018, 8:27am UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/2 "2018-12-06T08:27:20Z")
> [@Sjaak01](#): > > No idea where I should post this as the x-pack forum appears to be locked... That's the right place. Or it can be in #kibana. I'm moving your post there. We now have tags where you can define which feature it is about. ie, I added security and reporting here. ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [December 6, 2018, 12:39pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/3 "2018-12-06T12:39:31Z")
Hey @Sjaak01, > [@Sjaak01](#): > > I got my users set up with spaces permissions so they can only view the spaces the have access to. Works fine. The problem is that these users are allowed to generate reports and we have a custom logo. But for the custom logo to show up in reports, a user MUST have access to the kibana\_user role. But a user with access to kibana\_user automatically can see all spaces on login... I haven't heard of this limitation/issue yet. I'll try to reproduce this, and report back with my findings. > [@Sjaak01](#): > > Another issue is that even if a user has minimum rights, they can still do things such as access the advanced settings page. This is intentional for the 6.5 release of Spaces. We are working on expanding this functionality with [Granular Application Privileges](https://github.com/elastic/kibana/issues/20277), which will allow you to control who can access specific features within Kibana. Feel free to follow the issue to track our progress and make suggestions! ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [December 6, 2018, 1:26pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/4 "2018-12-06T13:26:36Z")
Update: I've reproduced this, and filed an issue with the details and root cause: [https://github.com/elastic/kibana/issues/26760](https://github.com/elastic/kibana/issues/26760) Thanks for the report @Sjaak01, we will work to prioritize a fix! ---
**Author:** ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Post date:** [December 6, 2018, 11:33pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/5 "2018-12-06T23:33:52Z")
Thanks 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 3, 2019, 11:33pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676/6 "2019-01-03T23:33:55Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.