# Can we implement Kibana read only user with dashboard edit option also?

**URL:** <https://forum.opensearch.org/t/can-we-implement-kibana-read-only-user-with-dashboard-edit-option-also/24112>\
**Category:** Security\
**Created:** [April 14, 2025, 11:54am UTC](https://forum.opensearch.org/t/can-we-implement-kibana-read-only-user-with-dashboard-edit-option-also/24112 "2025-04-14T11:54:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![amolusare](https://avatars.discourse-cdn.com/v4/letter/a/b4bc9f/32.png) [@amolusare](https://forum.opensearch.org/u/amolusare)\
**Post date:** [April 14, 2025, 11:54am UTC](https://forum.opensearch.org/t/can-we-implement-kibana-read-only-user-with-dashboard-edit-option-also/24112/1 "2025-04-14T11:54:15Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
opnesearch 2.17.1

**Describe the issue** :

Can we implement Kibana read only user with dashboard edit option also?  
we have created advanced\_user with kibana\_read\_only access , can we provide this role woth edit also (kibana user)???

**Configuration** :

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [April 14, 2025, 2:05pm UTC](https://forum.opensearch.org/t/can-we-implement-kibana-read-only-user-with-dashboard-edit-option-also/24112/2 "2025-04-14T14:05:40Z")

</div>

Hi @amolusare ,

The `kibana_read_only` role uses the OpenSearch Dashboards [readonly\_mode](https://opensearch.org/docs/latest/security/access-control/users-roles/#opensearch-dashboards-readonly_mode) functionality by default. To allow a user to edit dashboards via UI, they should not be assigned to the `kibana_read_only` role.

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [April 14, 2025, 2:20pm UTC](https://forum.opensearch.org/t/can-we-implement-kibana-read-only-user-with-dashboard-edit-option-also/24112/3 "2025-04-14T14:20:25Z")

</div>

According to the documentation [here](https://opensearch.org/docs/2.17/security/access-control/users-roles/#opensearch-dashboards-readonly_mode) , If a user is also mapped to any role listed under `plugins.security.restapi.roles_enabled` in `opensearch.yml` , then `readonly_mode` is ignored, giving them access to the standard UI elements.
