# Read only for Global Tenant
**URL:** https://forum.search-guard.com/t/read-only-for-global-tenant/1063
**Category:** Search Guard
**Created:** [August 8, 2018, 11:33pm UTC](https://forum.search-guard.com/t/read-only-for-global-tenant/1063 "2018-08-08T23:33:16Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Daqueshia\_Irvin](https://forum.search-guard.com/u/Daqueshia_Irvin)
#### Post date: [August 8, 2018, 11:33pm UTC](https://forum.search-guard.com/t/read-only-for-global-tenant/1063/1 "2018-08-08T23:33:16Z")
Hello All,
I would like to keep the Global tenant to provide a standard set of dashboards for all user. I would like to provide the objects in the Global tenant as read only with no write permissions.
How can I do this?
- Search Guard and Elasticsearch version : 6.2.2
---
### Author:  [@jkressin](https://forum.search-guard.com/u/jkressin)
#### Post date: [August 10, 2018, 9:17am UTC](https://forum.search-guard.com/t/read-only-for-global-tenant/1063/2 "2018-08-10T09:17:04Z")
This is done by giving these users only READ permissions for the .kibana index, e.g.
```
'?kibana':
'*':
- READ
```
``
> **···**
>
> On Thursday, August 9, 2018 at 1:33:17 AM UTC+2, Daqueshia Irvin wrote:
>
> > Hello All,
>
> >
>
> > I would like to keep the Global tenant to provide a standard set of dashboards for all user. I would like to provide the objects in the Global tenant as read only with no write permissions.
>
> >
>
> > How can I do this?
>
> >
>
> >
>
> >
>
> > - Search Guard and Elasticsearch version : 6.2.2
>
> >
---
### Author:  [@Daqueshia\_Irvin](https://forum.search-guard.com/u/Daqueshia_Irvin)
#### Post date: [August 23, 2018, 3:54pm UTC](https://forum.search-guard.com/t/read-only-for-global-tenant/1063/3 "2018-08-23T15:54:04Z")
Will the users still be able to write in other tenants if I take away write at the .kibana level?
> **···**
>
> On Friday, August 10, 2018 at 5:17:04 AM UTC-4, Jochen Kressin wrote:
>
> > This is done by giving these users only READ permissions for the .kibana index, e.g.
>
> > ```
> > '?kibana':
> > '*':
> > - READ
> >
> > ```
>
> > ``
>
> >
>
> >
>
> > On Thursday, August 9, 2018 at 1:33:17 AM UTC+2, Daqueshia Irvin wrote:
> >
> > > Hello All,
>
> > >
>
> > > I would like to keep the Global tenant to provide a standard set of dashboards for all user. I would like to provide the objects in the Global tenant as read only with no write permissions.
>
> > >
>
> > > How can I do this?
>
> > >
>
> > >
>
> > >
>
> > > - Search Guard and Elasticsearch version : 6.2.2
>
> > >
---
### Author:  [@jkressin](https://forum.search-guard.com/u/jkressin)
#### Post date: [August 23, 2018, 4:01pm UTC](https://forum.search-guard.com/t/read-only-for-global-tenant/1063/4 "2018-08-23T16:01:00Z")
Yes. The Search Guard multi-tenancy module will take care of assigning the correct permissions for the tenant indices automatically, according to the tenant configuration.
> **···**
>
> On Thursday, August 23, 2018 at 10:54:04 AM UTC-5, Daqueshia Irvin wrote:
>
> > Will the users still be able to write in other tenants if I take away write at the .kibana level?
> >
> > On Friday, August 10, 2018 at 5:17:04 AM UTC-4, Jochen Kressin wrote:
> >
> > > This is done by giving these users only READ permissions for the .kibana index, e.g.
>
> > > ```
> > > '?kibana':
> > > '*':
> > > - READ
> > >
> > > ```
>
> > > ``
>
> > >
>
> > >
>
> > > On Thursday, August 9, 2018 at 1:33:17 AM UTC+2, Daqueshia Irvin wrote:
> > >
> > > > Hello All,
>
> > > >
>
> > > > I would like to keep the Global tenant to provide a standard set of dashboards for all user. I would like to provide the objects in the Global tenant as read only with no write permissions.
>
> > > >
>
> > > > How can I do this?
>
> > > >
>
> > > >
>
> > > >
>
> > > > - Search Guard and Elasticsearch version : 6.2.2
>
> > > >