Disallow change password of other users

Elastic Stack Kibana
1

Hello.

I would like to create a role that allows creating new users and manage them. But, it must not be able to change the password / manage some specific users.

Is this possible?.

The idea is 2 layers of administration:

  • super admin: It manages all the users (built-in, logstash, kibana, etc).
  • admin: It manages new users, but it shouldn't be able to modify the users created by the super admin user.

Thanks.

2

No this is not possible.

You can have a role which allows you to create / modify users but not change their passwords. However you cannot segment your users, and place limits on which users can be modified by which role.

3

You can have a role which allows you to create / modify users but not change their passwords.

What is that role?. If I set the role manage_security, I can modify other users and their passwords.

Thanks.

4

Any update?.

Thanks.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.