Is there an X-Pack security interface?

Is there a Kibana plugin to edit user roles, index and document-level security?

Yes. When x-pack is installed in Kibana, you have access to such things...