Grant permission to space is not effect

Elastic Stack Kibana
1

Hi,

My Elasticsearch is: 7.1.0
My Kibana is: 7.1.1
They are enabled xpack security and successful for some kind of role like kibana_dashboard_only_user

But my problem is:

  • I create 2 Spaces (development and staging) and 2 users (development and staging) , I want only 1 user can see/access 1 Space (In each space I create private Dashboard with different bussiness requirement ) . I did follow https://www.elastic.co/blog/introducing-kibana-spaces-for-organization-and-security so grant permission . But now, my problem is user staging can access Space developemt. I don't want staging user access to development Space.

User permission image

user
user.png1182×167 18 KB

staging roles

roles
roles.png1207×878 50.3 KB

What am I wrong?

2

If you want to control individual spaces in Kibana, do not use the kibana_user or kibana_dashboard_only_user roles. These roles were built before the spaces feature was introduced and gave the user read-only access to the entire .kibana index. So users with these roles are able to access all spaces in Kibana. Instead, create your own roles that grant access to specific spaces. More details on this can be found in the docs.

We have longer term plans to improve the user experience around this, so it's more obvious in the UI that these built-in roles cannot be locked down to a specific space.

3

You may find this related thread to be helpful as well:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.