# Any way to show different kibana view to different users?

**URL:** <https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342>\
**Category:** Kibana\
**Created:** [March 28, 2017, 6:01pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342 "2017-03-28T18:01:44Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 28, 2017, 6:01pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/1 "2017-03-28T18:01:45Z")

</div>

Hi Experts,

Is there any way to show two different view of kibana to two separate users. So something like if I prepare 2 dashboards one is for management view/dashboard and other is for operations team. Now I want to restrict both the users to their own dashboard in kiban.

I was checking X-pack , though it says we can provide role based authentication but it is not fulfilling our requirement . Even with X-pack all the users lands to the same Kibana Instance and all can see all the dashboard names , it is just when they try to open data will not appear if they are not authorized.This is something we do not want . Point is why to show names of operations team dashboards to management.

I am hoping someone must have achieved the same in production , any suggestion on this will be highly appreciated.

Regards  
VG

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [March 28, 2017, 8:13pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/2 "2017-03-28T20:13:32Z")

</div>

Hi,

The current solution to achieve this would be to set up multiple instances of Kibana, each configured to use a different `.kibana` index. One instance would have the dashboards set up for the Management users, and another instance would be set up for the Operations users.

With X-Pack security, you can create different roles, each with an index privilege to be able to access the particular `.kibana` index that has the saved objects it needs to use. Then you can grant those roles to the user instead of the built-in `kibana_user` role.

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 29, 2017, 7:33am UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/3 "2017-03-29T07:33:29Z")

</div>

@tsullivan,

Thank you for the prompt response . I have another concern on second solution . Please correct me if I am wrong . Let's say I have created 2 roles and they have access to two different kibana indexes (kibana\_management, kibana\_user) , what I believe is even with this approach both the users can see total dashboard list , however they will not be able to see the data in the dashboard .

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [March 29, 2017, 7:26pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/4 "2017-03-29T19:26:20Z")

</div>

With role-based security, you specify in the role configuration which indices a role can access. So if you have RoleA which can access `.kibana-a`; and RoleB that can access `.kibana-b`; RoleA can not access `.kibana-b` and RoleB can not access `.kibana-a`. Create an instance of Kibana configured to use `.kibana-a` as its index and create a role that has access to manage, read, index and delete privilege to `.kibana-a` (as well as cluster monitor privilege) - those are all the privileges that the built-in `kibana_user` role has. Then create some users with RoleA role, and give those users the URL to the KibanaA instance. Those users will not be able to see any of the data contained in the `.kibana-b` index. So the idea is just to make 2 duplicates of the built-in `kibana_user` role but customize the index they can access.

The `.kibana` indices manage the index patterns, saved searches, visualizations, dashboards and advanced settings for Kibana. The data in the dashboards comes from other indices such as Logstash or Beats, and the logged-in users will need privilege to access that as well. The data will be protected by default and you can grant access to the data using different kinds of roles. Users can have as many roles added as you like.

Of course, you could do all this without security - just create 2 different instances of Kibana that use different `.kibana` indices. The data will be accessible if users know how to find it, but users will only see dashboards in the listing and other saved objects that are configured for their own instance. That was the first part of my initial answer. I added the second part of my answer, which really just extends the first part, because you expressed interest in knowing what you can do with X-Pack security.

Hope that clears it up,  
-Tim

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [April 1, 2017, 9:21am UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/5 "2017-04-01T09:21:33Z")

</div>

> [@tsullivan](#):
>
> advanced settings for Kibana. The data in the dashboards comes from other indices such as Logstash or

yup !! things are clear now.Thank you so much for your time .

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [April 7, 2017, 10:35am UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/6 "2017-04-07T10:35:26Z")

</div>

@tsullivan,

Can I merge both these approaches. I mean can I provide 2 separate URL's with security to 2 different users.I implemented the security approach with X-pack but the user can see the list of all visualizations because all visualizations are stored in .kibana\_management index , though user is only allowed to see data in kibana\_management and management index only .

So idea is to provide role based access to the objects with security ?

Regards  
Vikas

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [April 13, 2017, 4:37pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/7 "2017-04-13T16:37:28Z")

</div>

> Can I merge both these approaches. I mean can I provide 2 separate URL's with security to 2 different users

Yes, the idea is to have 2 different Kibana URLs where each Kibana instance has a different config index

> So idea is to provide role based access to the objects with security ?

The idea is to have role based access to the different config indices

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [April 19, 2017, 7:41am UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/8 "2017-04-19T07:41:35Z")

</div>

@tsullivan  
Just another confusion , so if I use 2 different kibana instances with Xpack I need to use same Xpack settings and configuration in both the instances ? as i will be having same LDAP users for both the instances , also what about Xpack license is it common for both kibana instances or it will be different for each instance ?

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [April 21, 2017, 7:28pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/9 "2017-04-21T19:28:55Z")

</div>

> if I use 2 different kibana instances with Xpack I need to use same Xpack settings and configuration in both the instances ? as i will be having same LDAP users for both the instances

I don't think you need to have the same Kibana X-Pack configuration on every Kibana instance. You should at least have the Security plugin enabled on every instance though.

> also what about Xpack license is it common for both kibana instances or it will be different for each instance

X-Pack license is only installed in Elasticsearch. Kibana determines it's features by reading the license information from an Elasticsearch API.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 19, 2017, 7:32pm UTC](https://discuss.elastic.co/t/any-way-to-show-different-kibana-view-to-different-users/80342/10 "2017-05-19T19:32:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
