# Multitenant ElasticSearch **URL:** \ **Category:** Elasticsearch\ **Created:** [June 6, 2017, 6:52am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362 "2017-06-06T06:52:22Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Post date:** [June 6, 2017, 6:52am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/1 "2017-06-06T06:52:22Z")
Hi forum. I want use Elasticsearch for collecting data and i want that my users can't access other users' data. In other words, i want make accounting access for my users. How can i make that? Thanks you all! ---
**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\ **Post date:** [June 6, 2017, 8:00am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/2 "2017-06-06T08:00:14Z")
Would suggest you look into the x-pack security options and configurations. [https://www.elastic.co/guide/en/x-pack/current/xpack-security.html](https://www.elastic.co/guide/en/x-pack/current/xpack-security.html) ---
**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Post date:** [June 6, 2017, 8:03am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/3 "2017-06-06T08:03:32Z")
Yes, i'm trying to use it and i think works fine. But if i would use elasticsearch 2.4.4 and Kibi? I see there's Shield, but i haven't see it yet ---
**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\ **Post date:** [June 6, 2017, 8:21am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/4 "2017-06-06T08:21:10Z")
For ES 2.4.4 you should, as you state, look at Shield. Get in touch with the guys at [elastic.co](http://elastic.co). They should be able to sort you out. ---
**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Post date:** [June 6, 2017, 9:12am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/5 "2017-06-06T09:12:49Z")
Another question. I'm using X-Pack, Elasticsearch 5.4 and Kibana and i want that my user can read documents from indexes. What role have i to assign to the user? I see that "Kibana\_user" and "Kibana\_system" permit to see Kibana sections, but do not permit to see documents from the user. The only role that permits to see documents is "superuser". Thanks. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 6, 2017, 9:28am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/6 "2017-06-06T09:28:21Z")
A user can have multiple roles. so you would give the user access to the `kibana_user` role in order to be able to use Kibana and then add other roles that control access to the indices being vizualised. ---
**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Post date:** [June 6, 2017, 9:31am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/7 "2017-06-06T09:31:21Z")
Yep! But what is the role that permits to see documents in indexes? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 6, 2017, 9:46am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/8 "2017-06-06T09:46:53Z")
You need to create it so that it matches your requirements. If you have multiple user, you probably need to create a role per user. ---
**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Post date:** [June 6, 2017, 9:48am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/9 "2017-06-06T09:48:17Z")
Thanks! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 4, 2017, 9:48am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362/10 "2017-07-04T09:48:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.