# Getting started with managing users and how to control what data they can see

**URL:** <https://discuss.elastic.co/t/getting-started-with-managing-users-and-how-to-control-what-data-they-can-see/230607>\
**Category:** Elasticsearch\
**Created:** [April 30, 2020, 5:55pm UTC](https://discuss.elastic.co/t/getting-started-with-managing-users-and-how-to-control-what-data-they-can-see/230607 "2020-04-30T17:55:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ilovedonuts](https://avatars.discourse-cdn.com/v4/letter/i/5fc32e/32.png) [@ilovedonuts](https://discuss.elastic.co/u/ilovedonuts)\
**Post date:** [April 30, 2020, 5:55pm UTC](https://discuss.elastic.co/t/getting-started-with-managing-users-and-how-to-control-what-data-they-can-see/230607/1 "2020-04-30T17:55:20Z")

</div>

Our team has the following requirements that I need to look into...

- Create and manage users when they access Kibana from their workspace
- Control what these users see in Kibana

I need guidance on where to start with this. I'm finding documentation like [this](https://www.elastic.co/guide/en/kibana/current/using-kibana-with-security.html) but I'm very confused as to if I manage users in elasticsearch or in kibana? This is very confusing for me to understand and I haven't found an explanation yet.

---

<div class="post-metadata">

**Author:** ![KoettingSimon](https://avatars.discourse-cdn.com/v4/letter/k/ba9def/32.png) [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\
**Post date:** [April 30, 2020, 6:23pm UTC](https://discuss.elastic.co/t/getting-started-with-managing-users-and-how-to-control-what-data-they-can-see/230607/2 "2020-04-30T18:23:18Z")

</div>

Hi,  
First of all you need to configure X-Pack Security on your Elasticsearch cluster.  
To activate X-Pack Security have a look at [https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html)

There are no seperate "kibana-User" all user you are Using are Elasticsearch user.  
You can manage these Users via elasticsearch API or via the UI from Kibana (probably easier for the start).

To control access to the data you can create roles and assign these roles to your users.  
To create roles in kibana see this documentation: [https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-roles.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-roles.html)

Regards,  
Simon

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 28, 2020, 6:23pm UTC](https://discuss.elastic.co/t/getting-started-with-managing-users-and-how-to-control-what-data-they-can-see/230607/3 "2020-05-28T18:23:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.