# Restrict some kibana users in a particular dashboard

**URL:** <https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104>\
**Category:** Kibana\
**Created:** [April 12, 2017, 7:30am UTC](https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104 "2017-04-12T07:30:10Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![aryaray](https://avatars.discourse-cdn.com/v4/letter/a/4491bb/32.png) [@aryaray](https://discuss.elastic.co/u/aryaray)\
**Post date:** [April 12, 2017, 7:30am UTC](https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104/1 "2017-04-12T07:30:11Z")

</div>

Hi,

I want to restrict some users in kibana ,that users only able to access kibana dashboard (if possible then particular dashboard too).  
I am using kibana version 4.5.4 . Currently I am using htpass for user authentication but can't able to restrict user on dashboard . Below is my current default.conf file

```
   server {
    listen 8880;

    server_name xxx.xxx.com;

    auth_basic "Restricted Access";
    auth_basic_user_file /etc/nginx/htpasswd.users;

    location / {
        proxy_pass http://localhost:5601;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
```

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [April 12, 2017, 2:18pm UTC](https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104/2 "2017-04-12T14:18:53Z")

</div>

> [@aryaray](#):
>
> in kibana ,that users only able to access kibana dashboard (if possible then particular dashboard too).

You can do some of this today by using Shield plugin with Kibana. Shield enforces granular data-level restrictions for any client connecting to ES, including Kibana. So you can set up users and roles, such as "admin can read/write all indices" and "such and such user is restricted to only these actions on only these indices, documents, and fields".

However, at the moment there are no view-level restrictions in Kibana. We are also thinking of a way for two separate modes in dashboard, "View" and "Edit", so we can optimize the user experience around each.- we'd love your comments and feedback. [View/edit modes for dashboard by stacey-gammon · Pull Request #10585 · elastic/kibana · GitHub](https://github.com/elastic/kibana/pull/10585)

Some of our customers set up separate instances of Kibana for the user groups they support, which provides isolation of saved objects between groups and dashboards. . For the admin/user workflow you'd need true read/write permissions on the dashboard.

---

<div class="post-metadata">

**Author:** ![aryaray](https://avatars.discourse-cdn.com/v4/letter/a/4491bb/32.png) [@aryaray](https://discuss.elastic.co/u/aryaray)\
**Post date:** [April 12, 2017, 3:00pm UTC](https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104/3 "2017-04-12T15:00:30Z")

</div>

Thanks for your reply .We already check shield plugin ,but as per our current infra we not able to use shield . So we want to restrict user through nginx default.conf . Can you help me out any way ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 10, 2017, 3:05pm UTC](https://discuss.elastic.co/t/restrict-some-kibana-users-in-a-particular-dashboard/82104/4 "2017-05-10T15:05:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.