# Kibana Read only dashboard

**URL:** https://discuss.elastic.co/t/kibana-read-only-dashboard/214792
**Category:** Kibana
**Created:** [January 13, 2020, 10:17am UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792 "2020-01-13T10:17:13Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![DG13](https://avatars.discourse-cdn.com/v4/letter/d/a5b964/32.png) [@DG13](https://discuss.elastic.co/u/DG13)
#### Post date: [January 13, 2020, 10:17am UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/1 "2020-01-13T10:17:13Z")

</div>

Hi ,  
I am using ELK 7.1.0 community edition .  
Would like to enable read only dashboard for the users , Is this feature available in community edition ?  
I am aware that it's available in ELK Enterprise edition .

Thanks,  
Divya

---

<div class="post-metadata">

### Author: ![Fabio-sama](https://avatars.discourse-cdn.com/v4/letter/f/b9e5f3/32.png) [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)
#### Post date: [January 13, 2020, 11:51am UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/2 "2020-01-13T11:51:23Z")

</div>

Hi there,

If I'm not wrong the security basic features are free starting from version 7.1.0 then you should be able to use them.

Just create a space and a dashboard (index pattern, visualizations ecc...) in it. Create (with an admin user) a role with access restricted to that index (in read-only mode) and with permission to access to that specific space only, only to Dashboard section.

That should be enough for your purpose.

Let me know should you need help

---

<div class="post-metadata">

### Author: ![DG13](https://avatars.discourse-cdn.com/v4/letter/d/a5b964/32.png) [@DG13](https://discuss.elastic.co/u/DG13)
#### Post date: [January 13, 2020, 12:25pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/3 "2020-01-13T12:25:30Z")

</div>

Thanks Fabio for the confirmation!

Do you have steps on how to implement it ?

As I couldn’t find how to enable the read only dashboard in Kibana management .

I Followed this Blog

[https://www.elastic.co/blog/kibana-dashboard-only-mode](https://www.elastic.co/blog/kibana-dashboard-only-mode)

But I couldn’t find it in my Kibana UI ☹

Are you talking something different ?

Thanks ,

Divya

---

<div class="post-metadata">

### Author: ![Fabio-sama](https://avatars.discourse-cdn.com/v4/letter/f/b9e5f3/32.png) [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)
#### Post date: [January 13, 2020, 1:35pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/4 "2020-01-13T13:35:44Z")

</div>

Ok so, you don't see the tab in the Kibana UI since you haven't enabled it.

In your `config/elasticsearch.yml` file add the following lines:

```
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

```

Restart elasticsearch.  
Open a terminal inside the elasticsearch folder and launch:  
`bin/elasticsearch-setup-password interactive` and follow the prompt commands to setup the initial passwords (including the elasticsearch admin password).

If evertything went well, launching a cURL  
`curl -XGET "localhost:9200"`

You'll receive the error  
`{"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}`

In fact, you have to authenticate yourself with:

`curl -XGET "localhost:9200" -uelastic` and then typing the password for the user `elastic` you've just set.

In the kibana folder, add to the `config/kibana.yml` file the following lines:

```
elasticsearch.username: "elastic"
elasticsearch.password: "your_pw"

```

> NOTE: if you have to do this in production use the keystore in order to avoid writing the password in clear in a file

Restart Kibana.  
Now, accessing Kibana, in the management section you'll find these new tabs  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6cce517b3df837ded961185ffcf2e9e2391864f5.png)

---

<div class="post-metadata">

### Author: ![Fabio-sama](https://avatars.discourse-cdn.com/v4/letter/f/b9e5f3/32.png) [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)
#### Post date: [January 13, 2020, 1:48pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/5 "2020-01-13T13:48:19Z")

</div>

Now, just create a new space in the `Manage Spaces` section (upper left corner) and create in it whatever you want useful to the final dashboard (index pattern, visualizations, dashboard etc).  
In my case I'm using the classic `[eCommerce] Revenue Dashboard`.

Then, go to `Management>Security>Roles` and create the role (e.g. `ecommerce_read_only`, adding only the `read` privileges to the index you want:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/f/9f69c53550e053edca244471c7826bb57d3a035f.png)

And the space privilege according to the space you've just created

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/4/545503da5b87662526027a1c80dfbd637b92d7fe.png)

Now create the new user (`Management>Security>Users`) and assign to it that role

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/5/f5ac57b36dc31649cf43b29b9b074536466339a4.png)

You can now log out with the admin (elastic) user and log back in with the just created user. You should be able to do noting but `read` the above-created dashboard (if you tried to edit it and then save it you should see an error message).

Unfortunately, 7.1.0 version is not new enough to filter out all those sections which are not needed and simply leave the Dashboard section but at least you avoid the `ecommerce_user` mess around risking to break anything.

Hope this helps!

---

<div class="post-metadata">

### Author: ![DG13](https://avatars.discourse-cdn.com/v4/letter/d/a5b964/32.png) [@DG13](https://discuss.elastic.co/u/DG13)
#### Post date: [January 20, 2020, 4:00am UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/7 "2020-01-20T04:00:25Z")

</div>

Hi @Fabio-sama  
Thanks for the steps with screenshots !!  
I was able to create the space however I couldn't find the the Management \> security \> roles in Kibana . I am using 7.1.0 community version .

Attaching the screenshots of the space which which I could see in Kibana UI .

 ![Screenshot 2020-01-20 at 12.01.23 PM](https://us1.discourse-cdn.com/elastic/original/3X/b/b/bbc3688e0805dc4ba872377af8db7866170a73b7.png)

Thanks,  
Divya

---

<div class="post-metadata">

### Author: ![Fabio-sama](https://avatars.discourse-cdn.com/v4/letter/f/b9e5f3/32.png) [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)
#### Post date: [January 20, 2020, 1:28pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/8 "2020-01-20T13:28:03Z")

</div>

Hi,

did you follow all the steps in my second post? Edit the yml files, restart elastic, run the command to interactively setup the passwords etc.. ?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 17, 2020, 1:28pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792/9 "2020-02-17T13:28:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
