Kibana 4 specific Dashboard access control by user


(Fernando Romano) #1

Hi there,

We're using Elastic and Kibana in the Cloud environment.

We have a Dashboards for each client. Is there any way to restrict access to a client user to a specific Dashboard with Search and Time period without Discover, Visualizations and so on features?

I searched in forums and couldn't find a solution.

Thanks in advance.


(Tim Sullivan) #2

One way to do it would be to "share" the dashboard and get the Embed code, then embed the Dashboard into another page, and give the client that new page. Then they will get just their own Dashboard and not have access to Discover, Visualize, etc.


(Fernando Romano) #3

Hi Tim, thanks for the answer.

We already have done that in clients backoffice. But now we have a different issue:

How t make an auto-authentication to Kibana to avoid client to enter Kibana login?

Please, remember that we're working in your cloud subscription environment.

Thanks in advance.


(Joe Fleming) #4

How t make an auto-authentication to Kibana to avoid client to enter Kibana login?

You'd have to somehow inject authentication headers into the original request. I don't think there's a way to do this in Cloud directly, you'd have to pass requests through an external proxy server that would add Basic auth headers or handle some other Shield-supported authentication scheme.

Keep in mind then that requests that go through that server are unprotected, and would be like Kibana running without Shield.


(system) #5