# Redirecto only to specific dashboard in Kibana behind Nginx reverse proxy

**URL:** https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052
**Category:** Kibana
**Created:** [May 14, 2021, 5:30pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052 "2021-05-14T17:30:00Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![rmartinez.rv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rmartinez.rv/32/86414_2.png) [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)
#### Post date: [May 14, 2021, 5:30pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052/1 "2021-05-14T17:30:00Z")

</div>

Hi.  
I'm using nginx as a reverse proxy to auto-authenticate a dashboard iframe (via share) in another server....  
So far i have this:

```
server {
        listen 443 ssl http2 default_server;

        ssl_certificate "/etc/pki/tls/certs/domain/domaincertificate.crt";
        ssl_certificate_key "/etc/pki/tls/certs/domain/domainkey.key";

        location / {
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Authorization "Basic *";
                proxy_pass https://my.kibanaserver:5601;
                proxy_redirect off;
                proxy_buffering off;
        }
}

```

With the above configuration i'm able to open a browser like this:  
`https://myreverseproxy.domain.com`

and get the data from  
`https://my.kibanaserver:5601`

The `user` configured is read-only, works in a independent space and has limited access to other parts of the platform...  
So far so good..

What i need to do is to "disable" or "protect" other links in the dashboard... permitting to the user only navigate the specific dashboard assigned for him.  
For example let's say that i have a dashboard and i want show it through my reverse proxy:

`https://myreverseproxy.domain.com/s/clientes/app/dashboards#/view/2a956837-49a7-4gg7-a233-4f7c69c997c7`

This works ok..  
But when i try to access :  
`https://myreverseproxy.domain.com/s/clientes/app/home#/`  
or  
`https://myreverseproxy.domain.com/s/clientes/app/dashboards#/`

It take me there...which i don't want to...  
is there a way to ban the access to that "resource" to the user through nginx configuration?

Or maybe there is a better approach?  
Thanks in advance

Ricardo

---

<div class="post-metadata">

### Author: ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)
#### Post date: [May 17, 2021, 2:30pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052/2 "2021-05-17T14:30:14Z")

</div>

You could limit each space to a customer and add there dashboards only allowed to them. Then you can limit all request that contain that space in the URL (/s/clientes/ in the case of your URL).

---

<div class="post-metadata">

### Author: ![rmartinez.rv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rmartinez.rv/32/86414_2.png) [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)
#### Post date: [May 17, 2021, 3:12pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052/3 "2021-05-17T15:12:17Z")

</div>

Hi @Marius_Dragomir !  
Thanks for your answer... in fact i'm doing that... each user has his own space with only view to his own dashboards and index's.... i was trying to limit the access to other parts of the platform.  
Despite the USER has "Dashboard" only access... as the image shows:

 ![Kibana access](https://us1.discourse-cdn.com/elastic/original/3X/1/c/1c8329ee7f9c72f78002de169c55fb61d72bb345.jpeg)

But the user can navigate to "Home" and "Overview"... then it has the "permissions" to create and play with the "Example Data", which i don't want!..  
Is there a way to be more restrictive with the user access to the dashboards?? I'm thinkin a permission to only see the Dashboards and nothing else....  
Thanks!

---

<div class="post-metadata">

### Author: ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)
#### Post date: [June 14, 2021, 1:25pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052/4 "2021-06-14T13:25:59Z")

</div>

If you don't want to be able to create/modify Dashboards or Visualizations look into adding read-only for the indices in the role description. If you can post it here I can probably help tune it.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 12, 2021, 1:26pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052/5 "2021-07-12T13:26:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
