diff --git a/docs/spaces/securing-spaces.asciidoc b/docs/spaces/securing-spaces.asciidoc
index 1fd6e915bc4f8..fdbd6660b8a91 100644
--- a/docs/spaces/securing-spaces.asciidoc
+++ b/docs/spaces/securing-spaces.asciidoc
@@ -4,4 +4,6 @@
 
 With security enabled, you can control who has access to specific spaces. You can manage access in **Management > Roles**.
 
-image::spaces/images/securing-spaces.png["Securing spaces"]
\ No newline at end of file
+image::spaces/images/securing-spaces.png["Securing spaces"]
+
+Note that kibana ships with a built-in role called ```kibana_user``` which grants the **all** privilege as minimum access to all spaces. In order to restrict a user to only a subset of spaces, remember to not give the ```kibana_user``` role but but instead to create a custom scheme where new roles grant both Index Privileges **manage, read, index, delete** to the pattern ```.kibana*``` and the intended access to the correct subset of spaces.