# Kibana Security Roles

**URL:** https://discuss.elastic.co/t/kibana-security-roles/199975
**Category:** Kibana
**Created:** [September 18, 2019, 10:40am UTC](https://discuss.elastic.co/t/kibana-security-roles/199975 "2019-09-18T10:40:32Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![j\_a\_griffiths](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/j_a_griffiths/32/54323_2.png) [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)
#### Post date: [September 18, 2019, 10:40am UTC](https://discuss.elastic.co/t/kibana-security-roles/199975/1 "2019-09-18T10:40:32Z")

</div>

I am currently using the Sample data ingested into a locally hosted elastic/kibana setup so I have indexes for flight data, log data and eCommerce data  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/8/7847af99b355a7987e3ed56d17b887f8e6b38016.png)

I am wanting to set up a new Security role and user so that the user can only see the flights data (and for only one of the carriers "Kibana Airlines"

I have created a user and assinged a new role setup as below which seems to work mostly

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/1/71934ea73e40935b0242519146951bdc74517123.png)

Looking at the pre supplied Flights dashboard I can see I only get the data for the carrier in question

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/2/520cb3d68c453a7355972ed319e70ee40c484657.png)

Q1 - When I go to the discover section I notice I can list all indexes is there any wauy of limiting this list to only show those granted in the security roles - see below

![image](https://us1.discourse-cdn.com/elastic/original/3X/3/b/3b95a17fa539ffa3e92331934b15842de2730fae.png)

Q2 is there any way of disabling the management cog

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/2/62ddc322393eb3885ab686df03b2e51aaf8cbe78.png)

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [September 18, 2019, 1:14pm UTC](https://discuss.elastic.co/t/kibana-security-roles/199975/2 "2019-09-18T13:14:05Z")

</div>

Hey @j_a_griffiths,

> [@j\_a\_griffiths](#):
>
> Q1 - When I go to the discover section I notice I can list all indexes is there any wauy of limiting this list to only show those granted in the security roles - see below

There isn't a direct way to do this today, as the indices you're seeing are actually Kibana Index Patterns, as opposed to the underlying Elasticsearch indices. (Hopefully) you'll notice that selecting the other index patterns will yield no results for users assigned the `JetBeats` role.

As a potential workaround, you could create a dedicated Space for the "JetBeats" role, which only contains the `kibana_sample_data_flights` index pattern, and no others. Then you can update the "JetBeats" role to only have access to this new space, instead of having access to the Default space.

> [@j\_a\_griffiths](#):
>
> Q2 is there any way of disabling the management cog

Not yet, but believe me we want to make this happen! Follow [[Feature Control] Ability to hide Management application completely · Issue #35040 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/35040) and [Hide management sections based on cluster privileges · Issue #35965 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/35965) for our progress on this enhancement.

---

<div class="post-metadata">

### Author: ![j\_a\_griffiths](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/j_a_griffiths/32/54323_2.png) [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)
#### Post date: [September 18, 2019, 2:42pm UTC](https://discuss.elastic.co/t/kibana-security-roles/199975/3 "2019-09-18T14:42:50Z")

</div>

Thanks will give it a go

---

<div class="post-metadata">

### Author: ![j\_a\_griffiths](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/j_a_griffiths/32/54323_2.png) [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)
#### Post date: [September 18, 2019, 3:15pm UTC](https://discuss.elastic.co/t/kibana-security-roles/199975/4 "2019-09-18T15:15:32Z")

</div>

worked a treat - thanks

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 16, 2019, 3:15pm UTC](https://discuss.elastic.co/t/kibana-security-roles/199975/5 "2019-10-16T15:15:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
