# Rolebased access for dashboards in kibana

**URL:** https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038
**Category:** Kibana
**Created:** [July 11, 2019, 2:19pm UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038 "2019-07-11T14:19:44Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Gauti](https://avatars.discourse-cdn.com/v4/letter/g/cdc98d/32.png) [@Gauti](https://discuss.elastic.co/u/Gauti)
#### Post date: [July 11, 2019, 2:19pm UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/1 "2019-07-11T14:19:45Z")

</div>

Hey Guys,

We have a scenario to setup kibana dashboards for whole IT Infrastructure which includes  
wintel, linux, network and application dashboards

(dashboards will be like performances of servers, network devices and applications)

Now we need to give access to users which should be like  
=\>NOC user will have access to all dashboards  
=\>Wintel administrator will have access to only wintel dashboards  
=\>Linux administrator will have access to only linux dashboards  
=\>Network administrator will have access to only network dashboards

I have tried my level best to achieve this through spaces, but the problem is i'm not able to use one dashboard in two spaces (e.g: Noc user will have wintel performance data as well, so i can use the same dashboard for wintel administrator instead of creating new)

Is there a way to achieve to this scenario? Is this doable using kibana?  
I'm using elasticsearch 7.2.0

Please provide your advice.

Thanks  
Gautham

---

<div class="post-metadata">

### Author: ![Gauti](https://avatars.discourse-cdn.com/v4/letter/g/cdc98d/32.png) [@Gauti](https://discuss.elastic.co/u/Gauti)
#### Post date: [July 15, 2019, 7:35am UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/2 "2019-07-15T07:35:40Z")

</div>

Hey Guys,

Any advice on the above mentioned questions??

Thanks  
Gautham...

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [July 15, 2019, 3:36pm UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/3 "2019-07-15T15:36:51Z")

</div>

Hi @Gauti,

My first thought was to create 3 spaces (one for wintel dashboards, one for linux and one for network), then create 4 different roles:

- wintel - gives access only to wintel space
- linux - gives access only to linux space
- network - gives access only to network space
- noc - gives access to all three spaces.

Wouldn't that work for you?

> but the problem is i'm not able to use one dashboard in two spaces

Yeah, there is no way currently to have **the same** dashboard in multiple spaces. The only way to imitate that is to [export dashboard from one space and import it to another one](https://www.elastic.co/guide/en/kibana/master/spaces-moving-objects.html). But I'm not 100% sure you really need this.

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![Gauti](https://avatars.discourse-cdn.com/v4/letter/g/cdc98d/32.png) [@Gauti](https://discuss.elastic.co/u/Gauti)
#### Post date: [July 16, 2019, 3:02pm UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/4 "2019-07-16T15:02:37Z")

</div>

Hi @azasypkin Your idea looks great, may be i can use this solution if i am hosting for single customer.

My scenario here is i'm trying to utilize kibana as a multitenant way. I have created spaces to differentiate customers,  
correct me if i'm wrong, i'll have a space for customer and again spaces for different towers(wintel,linux,network & noc) in that case i'll end up creating a lot of spaces

moreover can we assign two spaces for a role?

Thanks  
Gauti

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [July 17, 2019, 6:54am UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/5 "2019-07-17T06:54:35Z")

</div>

> [@Gauti](#):
>
> My scenario here is i'm trying to utilize kibana as a multitenant way. I have created spaces to differentiate customers,  
> correct me if i'm wrong, i'll have a space for customer and again spaces for different towers(wintel,linux,network & noc) in that case i'll end up creating a lot of spaces

Yeah, that's not unusual solution, there are people who create hundreds of spaces for that purpose (manually or using [the API](https://www.elastic.co/guide/en/kibana/current/spaces-api.html)). But it's really hard to say how you can optimize it without full understanding of your data/security model, like which user groups should get access to which indices, which permissions should they get, what the difference between customer groups, etc. I'd encourage you to play with different options and see how well they fit.

Having said that we're actively investigating the ways we can improve that experience and make it easier to model different use cases with spaces. Feel free to leave your feedback on [any of the Space-related enhancements](https://github.com/elastic/kibana/issues?q=is%3Aissue+is%3Aopen+spaces+label%3AFeature%3ASecurity%2FSpaces) we're discussing right now.

> [@Gauti](#):
>
> moreover can we assign two spaces for a role?

Yes, definitely, you can add multiple "Space privileges" to a single role. See screenshots from the role management page (7.2.0):

 ![Screenshot%20from%202019-07-17%2008-40-34](https://us1.discourse-cdn.com/elastic/original/3X/b/9/b93b3095f682b83b21a07ec4f25355af1fc0de41.png) ![Screenshot%20from%202019-07-17%2008-40-46](https://us1.discourse-cdn.com/elastic/original/3X/1/4/141e59877ce7656551b8677360846dcec6e3d8db.png)

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![Gauti](https://avatars.discourse-cdn.com/v4/letter/g/cdc98d/32.png) [@Gauti](https://discuss.elastic.co/u/Gauti)
#### Post date: [July 18, 2019, 11:34am UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/6 "2019-07-18T11:34:42Z")

</div>

Thanks @azasypkin will go head with this approach as of now.

Thanks  
Gauti

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 15, 2019, 11:34am UTC](https://discuss.elastic.co/t/rolebased-access-for-dashboards-in-kibana/190038/7 "2019-08-15T11:34:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
