# Ability to restrict users from modifying Advanced Settings

**URL:** <https://forum.search-guard.com/t/ability-to-restrict-users-from-modifying-advanced-settings/2304>\
**Category:** Search Guard\
**Created:** [April 5, 2022, 3:35pm UTC](https://forum.search-guard.com/t/ability-to-restrict-users-from-modifying-advanced-settings/2304 "2022-04-05T15:35:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [April 5, 2022, 3:35pm UTC](https://forum.search-guard.com/t/ability-to-restrict-users-from-modifying-advanced-settings/2304/1 "2022-04-05T15:35:05Z")

</div>

Example query against the .kibana index where user updated advanced settings.

audit\_request\_path: /.kibana\_7.16.2/\_update/config:7.16.2  
audit\_request\_body: {“doc”:{“config”:{“dashboard:defaultDarkTheme”:false},“updated\_at”:“2022-04-05T06:45:46.142Z”}}

Is it possible to use DLS or FLS to restrict update permissions, while not blocking update permissions to modify dashboards/visualizations?

Also the kibana docs have the ability to disable access to advanced settings… [Advanced Settings | Kibana Guide [7.17] | Elastic](https://www.elastic.co/guide/en/kibana/7.17/advanced-options.html)

Is this supported by searchguard? Our official support contact has not been able to answer this question.

---

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [April 14, 2022, 5:57pm UTC](https://forum.search-guard.com/t/ability-to-restrict-users-from-modifying-advanced-settings/2304/2 "2022-04-14T17:57:16Z")

</div>

Bumping… As this is very high on my ORGs priority list.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [May 5, 2022, 5:58pm UTC](https://forum.search-guard.com/t/ability-to-restrict-users-from-modifying-advanced-settings/2304/3 "2022-05-05T17:58:11Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.