# Add users in Kibana with basic license using 7.10.1

**URL:** <https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [January 19, 2021, 11:59am UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535 "2021-01-19T11:59:24Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 19, 2021, 11:59am UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/1 "2021-01-19T11:59:24Z")

</div>

Hi,

I recently upgraded my ELK stack from 6.6 to 7.10. I wanted to use the role management feature to allow users to only view dashboards specific to them which would be secured via authentication. I tried this functionality out in 6.8 and worked perfectly before. Is it possible to achieve this with a basic licence using version 7.10.1?

---

<div class="post-metadata">

**Author:** ![Chris\_Owens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chris_owens/32/57329_2.png) [@Chris\_Owens](https://discuss.elastic.co/u/Chris_Owens)\
**Post date:** [January 19, 2021, 3:41pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/2 "2021-01-19T15:41:11Z")

</div>

Moved to the Kibana area for discussion, you will get better answers there! The Endpoint Security area is for discussions on the Endpoint Security product.

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 19, 2021, 3:54pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/3 "2021-01-19T15:54:55Z")

</div>

I think you might be able to use [Spaces](https://www.elastic.co/guide/en/kibana/7.10/xpack-spaces.html) depending on how many users and unique configurations you are thinking of.

For example, you have a Space called `Executive Users` and assign all executive users to that Space. Then within that Space you put only the dashboards you want them to see.

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 19, 2021, 4:30pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/4 "2021-01-19T16:30:26Z")

</div>

Hi Aaron, thank you for replying so quickly. Thats exactly what i did in 6.8 but in 7.10.1 where do I create the users and assign them to their specific spaces?

I was thinking about creating just the spaces and adding the dashboards into them but there is no authentication and i cant utilise the kibana\_dashboard\_only\_user function like i could with 6.8.

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 19, 2021, 4:37pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/5 "2021-01-19T16:37:54Z")

</div>

This was under the assumption you would [Create Users](https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-users.html) for each person and [Create/Assign Roles](https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-roles.html) to group them. The option for assigning a Space is located at the bottom of the Roles page `Add Kibana Privilege`.

![image](https://us1.discourse-cdn.com/elastic/original/3X/5/6/561d7f5c9afaf668925e5628a68ff2056f1b7b05.png)

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 19, 2021, 5:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/6 "2021-01-19T17:24:53Z")

</div>

![MyKibana](https://us1.discourse-cdn.com/elastic/original/3X/9/0/9008fa629379cc3dd976f84dce291243a058d86f.jpeg) I don't have that functionality currently available with 7.10.1. I've attached an image to show the options i have under stack management where the users and roles should be displayed.

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 19, 2021, 5:29pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/7 "2021-01-19T17:29:44Z")

</div>

Ahh sorry. You need to [enable security](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-getting-started.html) to get those options. If you go through these steps then you will be able to.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/6/76e6accf0e1bd8aaf85e58197a698b15df4ddb95.png)

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 9:13am UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/8 "2021-01-20T09:13:48Z")

</div>

Cool, thanks Aaron.

I'm getting a little stuck on the elasticsearch-setup-passwords command as its throwing the following error "'elasticsearch-setup-passwords' is not recognized as an internal or external command,  
operable program or batch file." My OS is windows 10. I'd really appreciate your help

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 11:32am UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/9 "2021-01-20T11:32:06Z")

</div>

Scratch that question

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 11:42am UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/10 "2021-01-20T11:42:50Z")

</div>

When entering "elasticsearch-setup-passwords interactive" I got this error "Failed to connect to elasticsearch at [http://XX.XXX.X.XXX:9200/\_security/\_authenticate?pretty](http://XX.XXX.X.XXX:9200/_security/_authenticate?pretty). Is the URL correct and elasticsearch running?"

I had a look at your website to troubleshoot and found this URL: [https://www.elastic.co/guide/en/elasticsearch/reference/master/trb-security-setup.html](https://www.elastic.co/guide/en/elasticsearch/reference/master/trb-security-setup.html). And entered the following to the elasticsearch.yml file.

xpack.security.http.ssl.enabled: true  
xpack.security.http.ssl.verification\_mode: certificate  
xpack.security.http.ssl.truststore.path: ?

Do I need to generate a certificate for the truststore path?

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 20, 2021, 1:33pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/11 "2021-01-20T13:33:31Z")

</div>

Do you need to setup SSL and certificates? If not then I wouldn't do those options. I am not familiar with Windows OS and certificates to help. So if you need to go that route I'd open a new topic for those.

To get Users and Roles to work you just need to enable xpack security and then generate passwords.

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 2:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/12 "2021-01-20T14:24:22Z")

</div>

No I dont need to setup SSL and certificates for want i actually need. I did enable xpack in the elasticsearch.yml file. xpack.security.enabled: true. Is it at this point I generate the passwords via the elasticsearch-setup-passwords function?

Apologies if i'm explaining this poorly

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 20, 2021, 2:27pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/13 "2021-01-20T14:27:37Z")

</div>

Correct. I should have stated the bare minimum to achieve what you are looking to do.

Those steps include a lot of additional security which might not be useful to what you are doing.

I'd remove all the other settings in your .yml and then run the password tool. Might need to edit your kibana.yml with new authentication properties also.

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 2:50pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/14 "2021-01-20T14:50:43Z")

</div>

I tried that to the elasticsearch-setup-passwords function again and i'm still getting the "failed to connect to elasticsearch at [http://XX.XXX.X.XXX:9200/\_security/\_authenticate?pretty](http://XX.XXX.X.XXX:9200/_security/_authenticate?pretty). Is the URL correct and elasticsearch running?"

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 20, 2021, 3:04pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/15 "2021-01-20T15:04:25Z")

</div>

Did you [start Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-built-in-users.html) before running the command?

If so what do you get with a basic curl command `curl localhost:9200`?

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://discuss.elastic.co/u/Richie)\
**Post date:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/16 "2021-01-20T15:24:49Z")

</div>

I noticed elasticsearch is momentarily staying up when xpack is set to true and then shuts down. This must be my problem

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 17, 2021, 3:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535/17 "2021-02-17T15:24:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
