# Restrict User to a dashboard
**URL:** https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145
**Category:** Kibana
**Created:** [June 23, 2015, 6:06am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145 "2015-06-23T06:06:06Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)
#### Post date: [June 23, 2015, 6:06am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/1 "2015-06-23T06:06:07Z")
Hi Experts,
Is it possible to restrict some users to a dashboard . I read about Shield , but is it possible without shield.
My requirement is restricting sales user to sales dashboard only . They should not be authorized to admin dashboard .
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 23, 2015, 7:59am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/2 "2015-06-23T07:59:54Z")
You could do this if you wanted to setup a proxy and then do URL based ACLs.
---
### Author:  [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)
#### Post date: [June 23, 2015, 8:07am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/3 "2015-06-23T08:07:10Z")
Interesting, Thank you Mark,
So from where I can start . Sorry I do not have much idea about Proxy . Is it something which I need to configure on windows machine (as I am windows user).I am assuming ACL is Access Control Link ?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 23, 2015, 8:09am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/4 "2015-06-23T08:09:43Z")
Not sure on Windows but maybe IIS can do it? Most people use something like nginx or apache on Linux.
ACL = Access Control List.
---
### Author:  [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)
#### Post date: [May 9, 2016, 1:35pm UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/5 "2016-05-09T13:35:19Z")
Hi Mark,
I tried to set IP based rules in nginx for the same purpose - restricting user's access to some of the dashboards/tabs of Kibana 4.5 but with no luck so far. From what I can see on my Wireshark outputs it seems that Kibana 4.5 sends the dashboards' name and details in the POST body and not in the url's. Is that true?
With Kibana 3.0 we used to save all the dashboards as .json files on /var/www/kibana3/app/dashboards and then use regex based location blocks with allow/deny commands in nginx config to restrict users' access to those dashboards. Is such approach still possible with Kibana 4.5? Purchasing a license for Shield is currently not an option for us due to the high fees.
Tnx,
Yuval.
---
### Author:  [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)
#### Post date: [May 10, 2016, 12:57am UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/6 "2016-05-10T00:57:45Z")
Yuval,
That is correct. Kibana 4+ utilizes ElasticSearch and stores the dashboards within the `.kibana` index.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:53pm UTC](https://discuss.elastic.co/t/restrict-user-to-a-dashboard/24145/7 "2017-07-06T13:53:56Z")