# Establish a user with limited ability to change dashboard filtering

**URL:** <https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215>\
**Category:** Kibana\
**Created:** [December 2, 2019, 4:27pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215 "2019-12-02T16:27:42Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Voula\_Mikr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/voula_mikr/32/58451_2.png) [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Post date:** [December 2, 2019, 4:27pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215/1 "2019-12-02T16:27:42Z")

</div>

Hi!  
In visualizations, I made two option lists , option list A and option list B, in order to filter my data and i added this in a dashboard. Option list A is "parent" of option list B and has as options option1 and option2. Is it possible to establish a user who ,for example, in iframe will see the data filtered with option1 and cannot delete this filtering?  
Thank you in advance!

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [December 3, 2019, 7:31pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215/2 "2019-12-03T19:31:51Z")

</div>

Hey @Voula_Mikr, I'd recommend creating an Elasticsearch role that uses [document level security](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/field-and-document-access-control.html). This will filter all of the Elasticsearch data to the subset the user should see.

Would you ideally like for Kibana to be embedded in an iframe into an existing site? Or were you attempting to use the iframe just to enforce the input controls constraints?

---

<div class="post-metadata">

**Author:** ![Voula\_Mikr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/voula_mikr/32/58451_2.png) [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Post date:** [December 3, 2019, 8:53pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215/3 "2019-12-03T20:53:08Z")

</div>

Hi Brandon,

Thank you for the response.  
I would like to embed Kibana in an iframe into a website.

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [December 3, 2019, 9:37pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215/4 "2019-12-03T21:37:42Z")

</div>

@Voula_Mikr, would you like to embed Kibana in such a way that they're always authenticating as the same user? Or is Kibana being embedded in an application which has it's own authentication, and you'd like the user/privileges to be dynamic?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 31, 2019, 9:42pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215/5 "2019-12-31T21:42:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.