# Some questions before buying a license

**URL:** <https://discuss.elastic.co/t/some-questions-before-buying-a-license/77940>\
**Category:** Elasticsearch\
**Created:** [March 9, 2017, 6:49am UTC](https://discuss.elastic.co/t/some-questions-before-buying-a-license/77940 "2017-03-09T06:49:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![McElroy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcelroy/32/24639_2.png) [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Post date:** [March 9, 2017, 6:49am UTC](https://discuss.elastic.co/t/some-questions-before-buying-a-license/77940/1 "2017-03-09T06:49:22Z")

</div>

Hello,

We are considering buying a license for X-Pack, but before that I'd like to ask a few things.  
Is it possible to authorize users from LDAP for specific indices?  
Is the LDAP integration similar to GIT? Like, that the user first have to login and then I can give him the permissions to specific repositories.  
Last but not least, can I create groups, on which I can set the permissions?

Best regards  
Andy

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [March 9, 2017, 8:14am UTC](https://discuss.elastic.co/t/some-questions-before-buying-a-license/77940/2 "2017-03-09T08:14:19Z")

</div>

> Is it possible to authorize users from LDAP for specific indices?

Absolutely.

> Like, that the user first have to login and then I can give him the permissions to specific repositories.

No, provided that you know the LDAP DN of the user, or the DNs of the LDAP groups to which they are a member, you can set everything up before you grant them access.

> can I create groups, on which I can set the permissions

Yes, in two different ways

1. We have _Roles_ that are essentially a collection of permissions to specific indices (and global cluster permissions). So, for example, there is a builtin role called `kibana_user` which provides the permissions a user needs in order to have access to use the Kibana product. You then grant that role to whichever users ought to be able to use Kibana.

2. We also support integration with LDAP groups, so if you like, you can manage a user's groups within your LDAP directory and then map those groups to X-Pack roles if that makes management easier for you.

All [our documentation is freely available](https://www.elastic.co/guide/en/x-pack/current/xpack-security.html), and you can [install](https://www.elastic.co/downloads/x-pack) a 30 day trail of X-Pack so it might be easiest to try it out for yourself.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 6, 2017, 8:14am UTC](https://discuss.elastic.co/t/some-questions-before-buying-a-license/77940/3 "2017-04-06T08:14:26Z")

</div>

Closed on April 6, 2017, 8:14am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.