Restrict some kibana users in a particular dashboard

Elastic Stack Kibana
1

Hi,

I want to restrict some users in kibana ,that users only able to access kibana dashboard (if possible then particular dashboard too).
I am using kibana version 4.5.4 . Currently I am using htpass for user authentication but can't able to restrict user on dashboard . Below is my current default.conf file

   server {
    listen 8880;

    server_name xxx.xxx.com;

    auth_basic "Restricted Access";
    auth_basic_user_file /etc/nginx/htpasswd.users;

    location / {
        proxy_pass http://localhost:5601;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
2

You can do some of this today by using Shield plugin with Kibana. Shield enforces granular data-level restrictions for any client connecting to ES, including Kibana. So you can set up users and roles, such as "admin can read/write all indices" and "such and such user is restricted to only these actions on only these indices, documents, and fields".

However, at the moment there are no view-level restrictions in Kibana. We are also thinking of a way for two separate modes in dashboard, "View" and "Edit", so we can optimize the user experience around each.- we'd love your comments and feedback. View/edit modes for dashboard by stacey-gammon · Pull Request #10585 · elastic/kibana · GitHub

Some of our customers set up separate instances of Kibana for the user groups they support, which provides isolation of saved objects between groups and dashboards. . For the admin/user workflow you'd need true read/write permissions on the dashboard.

3

Thanks for your reply .We already check shield plugin ,but as per our current infra we not able to use shield . So we want to restrict user through nginx default.conf . Can you help me out any way ?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.