# Mask sensitive PII data inside Kibana UI

**URL:** <https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920>\
**Category:** Kibana\
**Created:** [June 12, 2020, 4:09pm UTC](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920 "2020-06-12T16:09:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![uraf78](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/uraf78/32/70272_2.png) [@uraf78](https://discuss.elastic.co/u/uraf78)\
**Post date:** [June 12, 2020, 4:09pm UTC](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920/1 "2020-06-12T16:09:47Z")

</div>

I need to mask sensitive PII fields (email, user name, ip ...) inside Kibana  
This sensitive PII data should be stored without any manipulation in Elasticsearch but should be masked on Kibana UI

I already uses similar functionality for Kafka Lenses  
[https://help.lenses.io/using-lenses/data/data-policies/#:~:text=Mask%20Kafka%20data,4%20characters%20of%20the%20value](https://help.lenses.io/using-lenses/data/data-policies/#:~:text=Mask%20Kafka%20data,4%20characters%20of%20the%20value).

---

<div class="post-metadata">

**Author:** ![corey.robertson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/corey.robertson/32/54611_2.png) [@corey.robertson](https://discuss.elastic.co/u/corey.robertson)\
**Post date:** [June 12, 2020, 4:54pm UTC](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920/2 "2020-06-12T16:54:07Z")

</div>

Hi @uraf78

You can setup [field level security](https://www.elastic.co/guide/en/elasticsearch/reference/current/field-level-security.html) to set explicit permissions for which fields are able to be read.

There is not a way to mask the field, but you could create additional fields that are masked fields that the user is granted read permission to, and you create the mask however you see fit on ingest.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/mask-sensitive-pii-data-inside-kibana-ui/236920/3 "2020-07-10T16:54:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
