# Does ElasticSearch/Kibana Support Multi Tenancy?

**URL:** <https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627>\
**Category:** Kibana\
**Created:** [July 15, 2015, 1:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627 "2015-07-15T13:12:52Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bhutchinson](https://avatars.discourse-cdn.com/v4/letter/b/2acd7d/32.png) [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\
**Post date:** [July 15, 2015, 1:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/1 "2015-07-15T13:12:52Z")

</div>

I am trying to understand how to restrict the elasticsearch data that different user groups can view using Kibana. In other words, I am trying to understand how an elasticsearch/kibana solution can be a multi tenant solution.

I recognize the answer might have to do with how you architect your solution. Assume that I have two different sets of users. Each set of users can only access their own set of data via Kibana.

What is the best way to architect this solution?

Should I have 2 different indexes, one index for each user group? Or should I have one index and somehow restrict which data the users can run queries against in Kibana?

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 16, 2015, 4:49am UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/2 "2015-07-16T04:49:21Z")

</div>

Multi-tenancy at the data level exists if you pair Kibana/Elasticsearch with [Shield](https://www.elastic.co/products/shield) - you can restrict which users can view which data in Elasticsearch at a pretty granular level. However, fine-grained access control at the UI level, such as restricting which dashboards and views are accessible to given groups of users, is not part of that integration yet.

You can work around this currently by setting up multiple instances of Kibana - one per user - configured to point to different configuration indices (instead of the default .kibana).

---

<div class="post-metadata">

**Author:** ![dabitbol66](https://avatars.discourse-cdn.com/v4/letter/d/aca169/32.png) [@dabitbol66](https://discuss.elastic.co/u/dabitbol66)\
**Post date:** [January 11, 2016, 9:26pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/3 "2016-01-11T21:26:23Z")

</div>

Hello Tanya

I thought about suggested solution but that might not be enough.

for instance, If I index documents having field A and field B and I want to configure multi tenancy according specific values of field A, meaning prefiltering all visualized data according the tenant, how can I configure kibana.yml for each kibana UI in such way that users cannot modify this prefiltering criteria and therefore cannot see the data of the others ?

Thanks, Dan

---

<div class="post-metadata">

**Author:** ![Dhivakar\_Asokan](https://avatars.discourse-cdn.com/v4/letter/d/96bed5/32.png) [@Dhivakar\_Asokan](https://discuss.elastic.co/u/Dhivakar_Asokan)\
**Post date:** [May 10, 2016, 9:09am UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/4 "2016-05-10T09:09:55Z")

</div>

Hi Tanya,  
How can I configure my Elasticsearch to create multiple .kibana files based on the indices so that I can give access like one per user?

---

<div class="post-metadata">

**Author:** ![nkoothrappahli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nkoothrappahli/32/31959_2.png) [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Post date:** [April 6, 2017, 2:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/5 "2017-04-06T14:12:18Z")

</div>

Looks like Search Guard does support multitenancy for Kibana: [https://github.com/floragunncom/search-guard-docs/blob/master/multitenancy.md](https://github.com/floragunncom/search-guard-docs/blob/master/multitenancy.md) Tried the beta a few days ago and it worked very nice.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:32pm UTC](https://discuss.elastic.co/t/does-elasticsearch-kibana-support-multi-tenancy/25627/6 "2017-07-06T13:32:24Z")

</div>


