# Grants to see only Dashboard in Kibana

**URL:** <https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863>\
**Category:** Kibana\
**Created:** [December 13, 2016, 12:12pm UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863 "2016-12-13T12:12:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![olorasde](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/olorasde/32/40103_2.png) [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Post date:** [December 13, 2016, 12:12pm UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863/1 "2016-12-13T12:12:44Z")

</div>

Hi,

I am trying to configure a dashboard in kibana that can only be queried by a certain user group.

The idea is to use a permissions setting on the .kibana index and the data index on which I built the dashboard with a basic security configuration,

[

 ![](https://us1.discourse-cdn.com/elastic/original/2X/0/06d257f0215c0345d7d83f5f668c9e3f08c23de5.PNG)]

I can make a user access to the dashboard, but can also alter its contents, create new dashboards, etc.

I have tried simply giving it read permissions on the .kibana index, but when I log in again with the user, I can not see anything, all pages appear empty.

Is it possible to configure permission level security on the kibana index so that users with these permissions can only see a dashboard and interact with it, but do nothing else?

In earlier versions of Shield, it was possible to have a lower granularization of permissions, but now, the ones I can see are more basic (read, write, etc.)

In this line, is it possible to disable Kibana functionality using xpack or other configurations? For example, leave the menu option "Discover" blank or disappear?

Thank you,

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [December 13, 2016, 11:50pm UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863/2 "2016-12-13T23:50:56Z")

</div>

Could you try giving the user `read` and `view_index_metadata` privileges on `.kibana`? That should give the user read-only access to the dashboard. Note, however, that UI elements to alter the dashboard will still be shown but they just won't function.

> In this line, is it possible to disable Kibana functionality using xpack or other configurations? For example, leave the menu option "Discover" blank or disappear?

Its possible with individual plugins. So, for example, you could set `xplugins.reporting.enabled: false` in your `kibana.yml` to disable the Reporting features in Kibana. However, it isn't possible to hide Discover.

---

<div class="post-metadata">

**Author:** ![olorasde](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/olorasde/32/40103_2.png) [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Post date:** [December 23, 2016, 7:34am UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863/3 "2016-12-23T07:34:27Z")

</div>

Thx for information shaunak, using read and view\_index\_metadata privileges was enought.

Regards!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 20, 2017, 7:34am UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863/4 "2017-01-20T07:34:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.