# Kibana Discover / Dashboards Read Only

**URL:** <https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286>\
**Category:** Elasticsearch\
**Created:** [January 17, 2024, 2:04pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286 "2024-01-17T14:04:31Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![randomnamegenerator](https://avatars.discourse-cdn.com/v4/letter/r/7ab992/32.png) [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\
**Post date:** [January 17, 2024, 2:04pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/1 "2024-01-17T14:04:31Z")

</div>

Hello All,

We wish to lock down access on a customer sites ELK in a way that they can view the Analytics/Discover & Dashboards but not edit. The indices already exist.

I have created a space,role and user with this aim in mind (following this article [Securing access to Kibana | Kibana Guide [7.17] | Elastic](https://www.elastic.co/guide/en/kibana/7.17/tutorial-secure-access-to-kibana.html)) but when I check the for the logstash indices below I see nothing,

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/a/9a5c6d8141038b8af8eedecbe4d180761ab50d76.png)

Is someone able to point me in the right direction?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [January 17, 2024, 3:38pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/2 "2024-01-17T15:38:48Z")

</div>

Hi @randomnamegenerator

Are you sure you know the name of the indices?... can you provide a few examples?

> [@randomnamegenerator](#):
>
> but when I check the for the logstash indices below I see nothing,

What exactly do you mean by this?

a) Are you using the default Space?  
b) Did you create a new space and assign the use to that space?  
c) Did you enable Discover in the Kibana Section?  
d) What version are you on? Are you on 7.17?

---

<div class="post-metadata">

**Author:** ![randomnamegenerator](https://avatars.discourse-cdn.com/v4/letter/r/7ab992/32.png) [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\
**Post date:** [January 18, 2024, 6:28am UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/3 "2024-01-18T06:28:09Z")

</div>

Hello Stephen,

Yes, our indices are named logstash-service-date, logstash-server-date and they are included under the role we have created for the customer(the screen shot from the first post)

Sorry if I was a bit vague,

A) Not at first, I was trying to limit access to a space created just for the customer. But After allowing access to all spaces for the customer account,the customer account can view data under discovery. Is this how its supposed to work?  
B) Yes we created new space "customer" and new role "customer" and new user account "customer"  
C) Yes, we are able to view discovery tab with the customer account not able to view any data, there is a prompt that appears for a short time we must add the indices to view data

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/1/610de98ec2dfc8626c0bd98cc3293d8a7b3960f7.png)

D) 7.14

Hope that helps?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [January 18, 2024, 2:56pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/4 "2024-01-18T14:56:32Z")

</div>

Yes, creating a space and associate with the role is the best way to do that. So when they log in they'll go to their space and their role.

If you created a new space, you need to create the data view in that space. It does not come automatically

so just go to the new space

Stack Management - Data View and create a Data View for your indices

`logstash-*`

Technically, you can go to the default space and copy it over through the saved objects, but you can also just simply create the dataviewin the new space

---

<div class="post-metadata">

**Author:** ![randomnamegenerator](https://avatars.discourse-cdn.com/v4/letter/r/7ab992/32.png) [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\
**Post date:** [January 22, 2024, 2:18pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/5 "2024-01-22T14:18:01Z")

</div>

If I go into Stack management in the customers space I dont see the Data View available.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/f/6fb1890f200463c765dadc154e1ac91c7b2b1c30.png)

Do I have to temporarily give the space,role or user account higher permissions?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [January 22, 2024, 3:39pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/6 "2024-01-22T15:39:03Z")

</div>

No Saved Objects (Dashboards, Index Patterns etc) are copied to a New Space automatically. Its a blank slate.

Go to the default / original Space

Stack Management  
Saved Objects  
Find the Index Pattern  
Copy to New Space : Three Dot Menu

---

<div class="post-metadata">

**Author:** ![randomnamegenerator](https://avatars.discourse-cdn.com/v4/letter/r/7ab992/32.png) [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\
**Post date:** [January 22, 2024, 8:35pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/7 "2024-01-22T20:35:20Z")

</div>

Perfect, after that change all the indexes I wanted are there in the customer space.

Thanks Stephen

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 19, 2024, 8:35pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-read-only/351286/8 "2024-02-19T20:35:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
