# Different profiles accessing different data

**URL:** <https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790>\
**Category:** Kibana\
**Created:** [October 7, 2015, 4:35pm UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790 "2015-10-07T16:35:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vmcano](https://avatars.discourse-cdn.com/v4/letter/v/f1d935/32.png) [@vmcano](https://discuss.elastic.co/u/vmcano)\
**Post date:** [October 7, 2015, 4:35pm UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790/1 "2015-10-07T16:35:29Z")

</div>

I need to cipher some parts of my data and I think I can do it using the Logstash filters.  
The difficult point of it is that I need two profiles: one which would be able to see deciphered data in Kibana and another that would have to see them ciphered.  
One approach could be duplicating data and storing it in two ways (ciphered and no-ciphered) and having two Kibana instances. However, this has become impossible to do because the amount of data makes it unviable.  
What could I do?

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [October 10, 2015, 2:35pm UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790/2 "2015-10-10T14:35:32Z")

</div>

I'm not really sure there is another (easy) way - otherwise you'd need one of the Kibana instances to somehow decipher the data. I suppose you can fork it to do that ? 🙂

---

<div class="post-metadata">

**Author:** ![vmcano](https://avatars.discourse-cdn.com/v4/letter/v/f1d935/32.png) [@vmcano](https://discuss.elastic.co/u/vmcano)\
**Post date:** [October 30, 2015, 2:09pm UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790/3 "2015-10-30T14:09:11Z")

</div>

At the end I realised not all the data was sensitive, so I ciphered only the logs that contains critical info. Doing so, the amount of duplicate data was much smaller. After that, I assigned each type to a different index and I used Shield to create users with different roles and permissions.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [November 6, 2015, 5:02am UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790/4 "2015-11-06T05:02:25Z")

</div>

Thanks for the update!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:09pm UTC](https://discuss.elastic.co/t/different-profiles-accessing-different-data/31790/5 "2017-07-06T14:09:42Z")

</div>

Closed on July 6, 2017, 2:09pm UTC