# How do I simply add a Kibana user with Read access to all indices?

**URL:** https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469
**Category:** Kibana
**Created:** [September 22, 2017, 10:13am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469 "2017-09-22T10:13:22Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ponten](https://avatars.discourse-cdn.com/v4/letter/p/eada6e/32.png) [@ponten](https://discuss.elastic.co/u/ponten)
#### Post date: [September 22, 2017, 10:13am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469/1 "2017-09-22T10:13:22Z")

</div>

Have issue with Kibana Security UI. (ver. 5.5.0)  
Want to create a user that basically can do everything but NOT

- creation/deletion of indices
- writing data to indicies

Should be able to

- read all indicies
- do get commands from shell
- create/modify visualisations  
etc

Didn't seem straight-forward to create a read-only ROLE to indicies in KIbana UI - the user ends up not even being able to open index in Discover panel.  
Preparatory work needed in Elastic configuration?

---

<div class="post-metadata">

### Author: ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)
#### Post date: [September 23, 2017, 12:21am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469/2 "2017-09-23T00:21:21Z")

</div>

Adding the built-in `kibana_user` role to the user will allow them the necessary privileges required to use Kibana.

You will then need to create a role to represent the data they will be consuming in Kibana. For this, you can use a wildcard for the indices ("`*`"). You will then want to give them at least read access.

Do you have a support contract, or are you a cloud customer? If so, I would highly suggest reaching out for support through those channels as they can provide faster, and guaranteed responses.

---

<div class="post-metadata">

### Author: ![ponten](https://avatars.discourse-cdn.com/v4/letter/p/eada6e/32.png) [@ponten](https://discuss.elastic.co/u/ponten)
#### Post date: [September 23, 2017, 7:08am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469/3 "2017-09-23T07:08:37Z")

</div>

Dear Tyler and thx a lot for the quick response!

ok, got it – giving the new user BOTH the kibana\_user role and the role that I created myself earlier was the correct procedure.

Regarding support contract status, we're in discussions with Elastic at the moment.  
No, we're not using the Cloud service, have our own test installation.  
It's a great product you have.

Best,  
Johan

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 21, 2017, 7:08am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469/4 "2017-10-21T07:08:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
