Access control of Kibana saved objects, e.g. search/visualization/dashboard

[Tiger_Wang]

I don't find a trivial answer, thus giving it a try here.

My scenarios are typical: I want to share a Kibana search/visualization/dashboard object with my colleagues, but they should have read-only access to these objects.

I am a paid customer to Elastic.co cloud.

Any link to how to do this?

Thanks,

Tiger

[tsullivan (Tim Sullivan)]

Hi Tiger,

Generally when a user has read/write privilege to the .kibana index which stores saved objects, they have read/write privilege to any document in the index. If your colleagues only require read access and you want them to be able to read certain documents, I hear that some groups have been able to use the Document Level Security feature to create roles with restricted access to certain documents: https://www.elastic.co/guide/en/elastic-stack-overview/current/field-and-document-access-control.html

You may have not found a trivial answer on this subject because this is where Kibana needs to have a layer of security on top of what is provided by the Elasticsearch capabilities. It's part of the Kibana platform currently being worked on with the Spaces feature: https://github.com/elastic/kibana/issues/18948.