# How to make kibana UI Access secure with users with limited privileges

**URL:** https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695
**Category:** Kibana
**Created:** [July 10, 2020, 12:20pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695 "2020-07-10T12:20:33Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![pankaj0172](https://avatars.discourse-cdn.com/v4/letter/p/58f4c7/32.png) [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)
#### Post date: [July 10, 2020, 12:20pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/1 "2020-07-10T12:20:33Z")

</div>

Hi Team,

How to make kibana UI Access secure with users/password with limited privileges in the basic license, like read-only access, full permission something like this, or any other suggestions?

Also, I have another problem, When I'm accessing kibana through IP:5601 on browsers on the local network it's opening without a password which is security concern but when I'm accessing it through publicly it's prompting for a password, is there way to restrict it with a password locally as well.  
OS- Ubuntu 18.04 server.  
Thanks for your help in advance.

---

<div class="post-metadata">

### Author: ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [July 13, 2020, 6:02am UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/2 "2020-07-13T06:02:41Z")

</div>

Hi

You need to create users and grant them roles with access to specific privileges . You can follow the guide here for more information .

[https://www.elastic.co/guide/en/kibana/current/xpack-security.html](https://www.elastic.co/guide/en/kibana/current/xpack-security.html)

For your second q, what license level you are on - on your cluster. Security features have been included in the basic level license, but requires you to be on 6.8 and higher versions.  
[https://www.elastic.co/blog/security-for-elasticsearch-is-now-free](https://www.elastic.co/blog/security-for-elasticsearch-is-now-free).

Thanks  
Rashmi

---

<div class="post-metadata">

### Author: ![pankaj0172](https://avatars.discourse-cdn.com/v4/letter/p/58f4c7/32.png) [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)
#### Post date: [July 13, 2020, 6:07am UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/3 "2020-07-13T06:07:29Z")

</div>

Thanks Rashmi for your response..I tired to check these settings but this security feature is not showing there,I'm not sure why..

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/2/822c502cc4643560713074928289283923e1f0db.png) .

![image](https://us1.discourse-cdn.com/elastic/original/3X/1/f/1fc6c873f130c2619dc78223e3af45ff0c0c1294.png)

I'm using basic license with 7.8.0..Can you help me here.

---

<div class="post-metadata">

### Author: ![pankaj0172](https://avatars.discourse-cdn.com/v4/letter/p/58f4c7/32.png) [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)
#### Post date: [July 13, 2020, 8:06am UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/4 "2020-07-13T08:06:46Z")

</div>

Hi Rashmi, I have figured it out how to create users/password in elastic search and now it's prompting for user name password for elastic search/kibana but I'm able to login elastic search but when I access KIbana UI by entering user name password it's says "Kibana not start yet".  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/7/67891680cf30582d9c5bdbace244148afb489803.png)  
But If I made x.pack.security to to false then it's url is working bt elastic search is not prompting for password. any idea?  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/3/e32cd1b9398bb1d9da4180b0115160b0bb5aa9a3.png)

Elastic search:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/1/11c4ed6094042f26504dca67e7b561cf578c23a1.png)

---

<div class="post-metadata">

### Author: ![pankaj0172](https://avatars.discourse-cdn.com/v4/letter/p/58f4c7/32.png) [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)
#### Post date: [July 13, 2020, 8:48am UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/5 "2020-07-13T08:48:03Z")

</div>

This is what I'm getting under the kibana server status...

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/e/be106a2040ea3b2ff8bfed812466f2c982509e60.png)

---

<div class="post-metadata">

### Author: ![pankaj0172](https://avatars.discourse-cdn.com/v4/letter/p/58f4c7/32.png) [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)
#### Post date: [July 15, 2020, 12:06pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/6 "2020-07-15T12:06:54Z")

</div>

@rashmi I have figured out this issue now. Thanks.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 12, 2020, 12:06pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695/7 "2020-08-12T12:06:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
