# Kibana users

**URL:** <https://discuss.elastic.co/t/kibana-users/250159>\
**Category:** Kibana\
**Created:** [September 28, 2020, 9:48am UTC](https://discuss.elastic.co/t/kibana-users/250159 "2020-09-28T09:48:40Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shalinicts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shalinicts/32/81251_2.png) [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Post date:** [September 28, 2020, 9:48am UTC](https://discuss.elastic.co/t/kibana-users/250159/1 "2020-09-28T09:48:40Z")

</div>

where is kibana users get stored.How to retrieve if kibana pod gets deleted in elastic cloud

---

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [September 28, 2020, 10:02am UTC](https://discuss.elastic.co/t/kibana-users/250159/2 "2020-09-28T10:02:51Z")

</div>

Hi @Shalinicts,

It depends on what users you're talking about. If you talking about users created in [native realm](https://www.elastic.co/guide/en/elasticsearch/reference/master/realms.html) then they are stored in a separate system `.security-xxx` index. You can read more info here [https://www.elastic.co/guide/en/elasticsearch/reference/7.x//security-backup.html](https://www.elastic.co/guide/en/elasticsearch/reference/7.x//security-backup.html).

Best,  
Oleg

---

<div class="post-metadata">

**Author:** ![Shalinicts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shalinicts/32/81251_2.png) [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Post date:** [September 28, 2020, 10:11am UTC](https://discuss.elastic.co/t/kibana-users/250159/3 "2020-09-28T10:11:17Z")

</div>

We are talking about RBAC users created in Kibana .Do we have to take backup of this index" security-xxx" index or " .kibana" index in elasticsearch to safeguard all created users as a backup.

---

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [September 28, 2020, 10:14am UTC](https://discuss.elastic.co/t/kibana-users/250159/4 "2020-09-28T10:14:15Z")

</div>

Got it, you need to backup only `.security-N` index as explained [here](https://www.elastic.co/guide/en/elasticsearch/reference/7.x/security-backup.html#backup-security-index-configuration) then. The `.kibana-N` index doesn't store any user or role information, it only stores "Saved Objects" (dashboards, visualizations, alerts, actions, index patterns etc. etc.).

Best,  
Oleg

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 28, 2020, 10:16am UTC](https://discuss.elastic.co/t/kibana-users/250159/5 "2020-09-28T10:16:46Z")

</div>

If you are using Elastic Cloud then there are automatic backups taken every 30 min for you.

---

<div class="post-metadata">

**Author:** ![Shalinicts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shalinicts/32/81251_2.png) [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Post date:** [September 28, 2020, 10:28am UTC](https://discuss.elastic.co/t/kibana-users/250159/6 "2020-09-28T10:28:45Z")

</div>

yeah we are using elastic cloud in kubernetes.So we dont want to take any manual backup of index right.If kibana pod gets deleted and recreated, we can still get the users created right?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 28, 2020, 9:11pm UTC](https://discuss.elastic.co/t/kibana-users/250159/7 "2020-09-28T21:11:06Z")

</div>

What do you mean by Kibana pod?

---

<div class="post-metadata">

**Author:** ![Shalinicts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shalinicts/32/81251_2.png) [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Post date:** [September 29, 2020, 6:25am UTC](https://discuss.elastic.co/t/kibana-users/250159/8 "2020-09-29T06:25:53Z")

</div>

we are deploying elasticsearch , kibana in kubernetes (GKE).So kibana would be running in one of the pod .

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 27, 2020, 6:25am UTC](https://discuss.elastic.co/t/kibana-users/250159/9 "2020-10-27T06:25:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.