# Field level security and visualisations **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [March 6, 2024, 10:09am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826 "2024-03-06T10:09:33Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 10:09am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/1 "2024-03-06T10:09:33Z")
We have implemented field level security to hide a sensitive field from a subset of users and this works as desired in discover etc. We had expected if a restricted user accesses a dashboard containing the field, the field value would not be visible - but this is not the case. The user can see the field and furthermore can even create a visualisation and include the hidden field in it! Is there a way to completely hide a field from users that also includes visualisations? Any help appreciated. ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [March 6, 2024, 10:45am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/2 "2024-03-06T10:45:41Z")
Hey @mwitsas. Thanx for reaching us. We can't replicate it. Can you give us more information? What kind of visualization are you trying to create? Also in which kibana version are you? ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 11:17am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/3 "2024-03-06T11:17:50Z")
Thanks for the reply Kibana 7.10.2 (sorry I know this is old). Data table visualisation allows a user to create a visualisation based on a field that's hidden from them otherwise. If they view a dashboard which includes a field that is otherwise hidden, the user can see values. The field can't be seen in discover etc. Hope this helps - ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 11:19am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/4 "2024-03-06T11:19:46Z")
I found this article - does this make sense to you? > [@Kibana role management granted fields not working](https://discuss.elastic.co/t/kibana-role-management-granted-fields-not-working/103552): > > Hi, I am using kibana to create roles. I want only specific fields to show in visualisation. I am putting that fields in granted fields. But in visualisation granted fields not reflected. Even all fields not reflected. When I use \*all in granted fields only at that time fields getting reflected in kibana visualisation. Instead I want to show only specific fields. What are the changes I need to implement while creating role. ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [March 6, 2024, 11:23am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/5 "2024-03-06T11:23:29Z")
Yes this is definitely an old version. Are you referring to the Lens datatable, the TSVB datatable or the aggbased datatable? We did some tests with Lens on the latest kibana and we can't replicate it so it is either a bug fixed in a more recent version or it is a bug present in the legacy vis editors ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 11:44am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/6 "2024-03-06T11:44:51Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/0/9/09da51c095b17444864329dfa03fbf2c235e01ba.png) Hi there, just a standard data table visualisation as shown in this screen grab ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 11:45am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/7 "2024-03-06T11:45:46Z")
Would be really useful to know this is not expected when we upgrade to v8 ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 6, 2024, 11:46am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/8 "2024-03-06T11:46:07Z")
Thanks again for your help with this - much appreciated ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [March 6, 2024, 12:18pm UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/9 "2024-03-06T12:18:21Z")
So it is a legacy table, I can test and let you know but most possibly I will reply tomorrow ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [March 7, 2024, 8:05am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/10 "2024-03-07T08:05:33Z")
@mwitsas I tested this in 7.17 (the version from 7 major that we support) and the latest 8.13 and works as expected in both versions. So my guess is that this was a bug on your version so upgrading in the latest 7.17 minor will solve the problem. ---
**Author:** ![mwitsas](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Post date:** [March 7, 2024, 8:20am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/11 "2024-03-07T08:20:59Z")
Thanks very much for doing this - that's good to know it's not expected behaviour (I couldn't believe it would be) but that was alluded to in the other post I linked to. We will be upgrading asap by the way! 😀 ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [March 7, 2024, 9:43am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/12 "2024-03-07T09:43:21Z")
Amazing!! Let me know if everything works as expected after your upgrade! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 4, 2024, 9:43am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826/13 "2024-04-04T09:43:28Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.