Hierarchy level access

[anja98 (Dan Ang)]

Hi,

I'd like to find out if Kibana support hierarchy level access.

For example, if an organisation has sub organisation and each sub has departments under it.

How can I create a department user login with access to only the department view the user belongs to?

How can I create a sub organisation user login with access its sub organisation view including all department under it?

How can I create an organisation user login with access to its organisation view including all sub organisation and all department under it?

[weltenwort (Felix Stürmer)]

Hi @anja98,

Security in Kibana is currently divided into two parts:

1. The Kibana system user account is used to access the saved objects (visualization definitions, dashboards definitions, etc). All users that can log into Kibana have access to those.
2. The logged in user account is used to access the data shown in the visualizations and dashboards.

While it is therefore not yet possible to segregate the visualizations and dashboards by user, the full suite Elasticsearch Security features is available to secure the data themselves. Hierarchical groups as described can be implemented using the Active Directory Realm, which supports transitive group membership discovery.