How to restrict edit access to dashboards / visuals within a space

Elastic Stack Kibana
1

Hello,

I have created a set of visuals within dashboard within a space.
I do not want anyone to change these dashboards / visuals in this space.
The user can create or change dashboards / visuals in other spaces.

Is there a way to restricted users from editing these dashboards / visuals in a certain space? Alternatively, can I "turn off" edit access to these dashboards / visuals?

Mike

2

Absolutely. You can create a user with a role which restricts access to whichever space you want. Please take a look at this Spaces | Kibana Guide [master] | Elastic &
Security | Kibana Guide [master] | Elastic

Thanks,
Bhavya

3

I should have made it clear that the user will have access to all the spaces in the account including the space I don’t want any edits on dashboard or visuals.

4

Hi @Amphagory

Can you expand a bit more give us a sense what you are looking.
Are there different Dashboards in Each Space or Each Space has its own dashboards and indices.

User A with Role Y

Space A, User A
Access to All Dashboards
Read / Write to all Dashboards

Space B, User A
Access to All Dashboards
Read / Write to all Dashboards

Space C, User A
Access to All Dashboards
Read Only to all Dashboards

Is that what you are asking for? Or can you give an example like this?

5

For this approach you would need to use DLS - Document level security | Elasticsearch Guide [7.15] | Elastic

6

Hello @stephenb,

Your example is a valid example.

User A has access to all the spaces and indices where he can edit dashboards and visuals.

I want to create either

i) A role where User A can Read / Write to all Dashboards and visuals in space A and B. In space C, I only want User A to have read access to all dashboards and visuals.

Space A, User A
Access to All Dashboards
Read / Write to all Dashboards

Space B, User A
Access to All Dashboards
Read / Write to all Dashboards

Space C, User A
Access to All Dashboards
Read Only to all Dashboards

OR

ii) Limit the edit access to dashboards and visuals to say superuser only. Therefore User A can not edit these dashboards and visuals.

I hope that clears things up,

Mike

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.