# Access Control

**URL:** <https://discuss.elastic.co/t/access-control/153790>\
**Category:** Kibana\
**Created:** [October 24, 2018, 11:57am UTC](https://discuss.elastic.co/t/access-control/153790 "2018-10-24T11:57:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![MiddlewareTeam](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Post date:** [October 24, 2018, 11:57am UTC](https://discuss.elastic.co/t/access-control/153790/1 "2018-10-24T11:57:45Z")

</div>

Is it possible to give user based access control to KIBANA dashboard? Like some user is having access to view specific content only and ADMIN is having visibility to all data?

Also is is possible to integrate the users with AD or any other such mechanism?

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 24, 2018, 12:32pm UTC](https://discuss.elastic.co/t/access-control/153790/2 "2018-10-24T12:32:06Z")

</div>

You can achieve something like it with dashboard\_only\_user, but I recommend waiting for Kibana Spaces, which is due to come out in 6.5 which will provide granular access to data.  
And yes, you can use Active Directory to map users in Kibana and Elasticsearch: [https://www.elastic.co/guide/en/elastic-stack-overview/6.x/active-directory-realm.html](https://www.elastic.co/guide/en/elastic-stack-overview/6.x/active-directory-realm.html)

---

<div class="post-metadata">

**Author:** ![MiddlewareTeam](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Post date:** [October 25, 2018, 8:11am UTC](https://discuss.elastic.co/t/access-control/153790/3 "2018-10-25T08:11:36Z")

</div>

Thanks,

I will try the AD integration and access control mechanism as well till the 6.5 comes in.

---

<div class="post-metadata">

**Author:** ![MiddlewareTeam](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Post date:** [October 29, 2018, 11:41am UTC](https://discuss.elastic.co/t/access-control/153790/4 "2018-10-29T11:41:47Z")

</div>

Hi

Below link suggests that dashboard only is possible in 6.0 onward but I am not getting any of the option at mentioned path.

> **[Kibana Dashboard Only Mode](https://www.elastic.co/blog/kibana-dashboard-only-mode)**
>
> Ever wish you could share your Kibana dashboards without the risk of someone accidentally deleting or modifying them? Do you want to show off your dashboards without the distraction of unrelated applications and links? In version 6.0 we’re making it...

Can someone please help with this?

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 29, 2018, 12:04pm UTC](https://discuss.elastic.co/t/access-control/153790/5 "2018-10-29T12:04:08Z")

</div>

What are you missing, the `kibana_dashboard_user_only` role?

---

<div class="post-metadata">

**Author:** ![MiddlewareTeam](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Post date:** [November 1, 2018, 6:08am UTC](https://discuss.elastic.co/t/access-control/153790/6 "2018-11-01T06:08:30Z")

</div>

Hi,

I am getting dashboard only mode but unable to add user for it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 29, 2018, 6:08am UTC](https://discuss.elastic.co/t/access-control/153790/7 "2018-11-29T06:08:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
