# Managing kibana for multiple users **URL:** \ **Category:** Kibana\ **Created:** [February 9, 2018, 5:25am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160 "2018-02-09T05:25:47Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![RamyaGowda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramyagowda/32/27440_2.png) [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Post date:** [February 9, 2018, 5:25am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/1 "2018-02-09T05:25:48Z")
Hi , How could i manage kibana when multiple user's are there, like i am the admin user and i should get full access to kibana, like wise there will another user which is Normal user he should have limited access in kibana like only he can see visulaizations and dashboards in kibana(read-only access) . how could i accomplish this . Please help me . ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [February 9, 2018, 6:47am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/2 "2018-02-09T06:47:00Z")
Hi @RamyaGowda You would need x-pack to be installed for this. Once you install it , the security plugin enables you to have fine grained role based access control to cater to the use case you have described. [https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html](https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html) [https://www.elastic.co/products/x-pack/security](https://www.elastic.co/products/x-pack/security) Try it, it comes with a 30 day trial license on fresh install. Cheers Rashmi ---
**Author:** ![RamyaGowda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramyagowda/32/27440_2.png) [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Post date:** [February 12, 2018, 4:33am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/3 "2018-02-12T04:33:02Z")
Hi @rashmi, I installed x-pack and and i have admin role , and i have created one normal user > POST /\_xpack/security/user/vinayak > { > "password" : "vini@123", > "roles" : ["other\_role1"], > "full\_name" : "Vinayak Choubey", > "email" : "[vinayak@gmail.com](mailto:vinayak@gmail.com)", > "metadata" : { > "intelligence" : 7 > }, > "enabled": true > } i am not abel to access any of the things,when i logged in with above user credentials ,and i am getting bellow error **Config: Error 403 Forbidden: action [indices:data/write/update] is unauthorized for user [vinayak]: [security\_exception] action [indices:data/write/update] is unauthorized for user [vinayak]** ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [February 12, 2018, 7:29pm UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/4 "2018-02-12T19:29:13Z")
Can you please share what roles does this user have here? We can figure out further what's wrong then. If he doesn't have enough permissions and roles assigned to him, he would get the error you have mentioned. Thanks Rashmi ---
**Author:** ![RamyaGowda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramyagowda/32/27440_2.png) [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Post date:** [February 14, 2018, 5:22am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/5 "2018-02-14T05:22:12Z")
Hi @rashmi, i have assigned the roles to users ,now they could access dashboard , but not dashboard data, means in ES this week data is there when normal user clicks on dashboard he is getting nothing empty container's here is the attachment where you can see the user's and their roles ![picture1](https://us1.discourse-cdn.com/elastic/original/3X/e/b/eb54467ef41673a3ac5e025df9e1f7461d854bfd.png) When i logged is as **superuser i.e elastic** dashboard data is visible , ![picture3](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f38909dbfd949b138ecf1919e5f8d3a1d9a45878.png) when i logged in as **normal use** r , user is able to access the dashboard but no data ![picture2](https://us1.discourse-cdn.com/elastic/original/3X/2/d/2d771dcc65de227c7ac0a337334e3dd0072c11c7.png) **In both super user and normal user i selected same Time Range** ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [February 14, 2018, 9:09pm UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/6 "2018-02-14T21:09:34Z")
You would have to give `read` and `view_index_metadata` to the user you created. The kibana\_user- Grants the minimum privileges required for any user of Kibana. This role grants access to the Kibana indices and grants monitoring privileges for the cluster. Its a reserved role. ![31%20PM](https://us1.discourse-cdn.com/elastic/original/3X/7/2/720b69275c4263c14a6a59a873a7e66f735125a4.png) Do you know that roles and users can be accessed via Management and role/user management can be easily handled there? Hope this helps, Thanks Rashmi ---
**Author:** ![RamyaGowda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramyagowda/32/27440_2.png) [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Post date:** [February 15, 2018, 6:58am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/7 "2018-02-15T06:58:50Z")
Hi @rashmi Please check the sreenshot **read** and **view\_index\_metadata** privileges are assigned to the user by default. ![Screenshot%20from%202018-02-15%2012%3A26%3A57](https://us1.discourse-cdn.com/elastic/original/3X/5/0/50a1d3b7bebd978b87ee54344cf1d53439b438b0.png) ---
**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Post date:** [February 15, 2018, 7:51am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/8 "2018-02-15T07:51:04Z")
The problem is that you have only given the user permissions on the `.kibana` index. They must also have read permissions on any indicies that contain data they need access to. I recommend... 1. creating a new role, e.g. `elb_ro` 2. give this role **read** permissions to the the indicies where the data is located. 3. add the `elb_ro` role to any users that will be using these dashboards. NOTE: users can have multiple roles. ---
**Author:** ![RamyaGowda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramyagowda/32/27440_2.png) [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Post date:** [February 15, 2018, 9:11am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/9 "2018-02-15T09:11:36Z")
@rcowart Thank you so much for your reply it worked 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 15, 2018, 9:11am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/119160/10 "2018-03-15T09:11:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.