I have 2 users with different rules, and I would like that 1 user can see "msisdn" field and not the other .
I created a search as following and I would like to hide the "msisdn" field (red square) depending the user.
If it's not possible, is this possible to disable the expanded arrow (green square), in this way I can choose which field display in the columns.
Sorry for my english, I hope you have understood my issue.
Are you using shield? If so, https://www.elastic.co/guide/en/shield/current/setting-up-field-and-document-level-security.html#field-level-security should help with locking down fields. Kibana supports authentication through shield but doesn't currently have support for securely excluding fields at the UI level.
As far as preventing the doc table from expanding, there isn't anything that I know of to prevent expanding without making code modifications.