Disabling certain views for users

Elastic Stack Kibana
1

Hi everyone.
So i have been trying to disable certain parts of kibana for certain user. I want the normal users to have only the dashboard view and one plugin view enabled, like canvas, ML or custom plugin. Is there a way to disable them selectively?

Regards,

2

Hi @Ali_Muhammad,

What version of Kibana are you using? We have feature controls that may help you, see: https://www.elastic.co/guide/en/kibana/7.5/kibana-role-management.html.

Thanks.

3

Hi Liza.
I am using 7.1.1 currently. The article you referred does it at Space level. I want to control this feature access on user level at the default Space.

4

Hi @Ali_Muhammad I am not aware of a way to do this, but let me ping one of my colleagues if he can help.

@Brandon_Kobel is there a way to do what Ali is asking for 7.1.1 ?

Thanks.

5

Hey @Ali_Muhammad, you can do this starting in 7.2 with feature controls. The article which @LizaD linked you to is great as well, it walks you through how to create a Role which only has access to a specific feature in a specific space (which the default space is one). Example 1 is very similar to what you're looking for: https://www.elastic.co/guide/en/kibana/7.5/kibana-role-management.html#_example_1_grant_all_access_to_dashboard_at_an_individual_space

1 Like
6

Thank you for your input Liza and Brandon. I'll test with the later version of ELK and will post back.
Also, are privileges assignment on application level is relevant in this case? https://www.elastic.co/guide/en/kibana/current/development-security-rbac.html

7

Hey @Ali_Muhammad, Kibana's implementation of RBAC does indeed use Elasticsearch's Application Privileges under the covers. https://www.elastic.co/guide/en/kibana/current/development-security-rbac.html expounds upon our implementation, but you don't need to know these details. You'll likely get more relevant information from here: https://www.elastic.co/guide/en/kibana/current/xpack-security-authorization.html

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.