User based kibana access control

Elastic Stack Kibana
1

Hi
I have so many users and I want to give access to my user based on their Reports in Reporting.
Example -A user can access only a report named as "Areport" B user can have only permission to access "Breport".
How can I make permission based access control of data.
Please Advise me.
If you need more clarification I can explain my scenario in more details if you are not able to understand my problem.

2

I think that if you are using Kibana Spaces, each space can have it's own reports.

Not sure though. But I'm moving the question to #kibana

3

Yes , Spaces is the way to achieve this. Version 6.5 introduces new Spaces feature. Spaces allows you to organize your dashboards, visualizations, and other saved objects into meaningful categories. Each space is independent, so objects that exist in one space don’t clutter other spaces. Kibana creates a default space for you. After you create your own spaces, you’re asked to choose a space when you log in to Kibana. You can change your current space at any time by using the menu.

Also How are your users configured? What roles are applied and in what order?

Thanks
Rashmi

4

Like I have posted some hospitals data in a index and now by using filter in kibana I have segregated each customer data and saved each customer reports with their name and now we want to let each customer access the kibana and can download their reports in CSV formats or can see their data in kibana itself.

But we don't want to show others data to anyone like customer A can only access their hospital data and customer B can only access their data and cannot see customer A data.

Please advise me can we achieve this using Spaces.

5

Any suggestions.please advise me I need your help.If you didn't understand my use case I can explain a bit more

6

@Larry_Gregory can help when he gets some time ...

But the general approach is to create an user, give sufficient privileges, generate reports. You can assign roles through the Management app in Kibana or with the user API. This example shows how to use Management to create a user who has a custom role and the reporting_user role.

  1. Go to Management > Roles , and click Create role .

  2. Give the new role a name, for example, custom_reporting_user .

  3. Specify the indices and privileges.Access to data is an index-level privilege, so in Create role , add a line for each index that contains the data for the report and give each index read and view_index_metadata privileges. For more information, see Security privileges.
    You can assign roles through the Management app in Kibana or with the user API. This example shows how to use Management to create a user who has a custom role and the reporting_user role.

  4. Go to Management > Roles , and click Create role .

  5. Give the new role a name, for example, custom_reporting_user .

  6. Specify the indices and privileges.Access to data is an index-level privilege, so in Create role , add a line for each index that contains the data for the report and give each index read and view_index_metadata privileges. For more information, see Security privileges.

  7. Add space privileges.Reporting users typically save searches, create visualizations, and build dashboards. They require a space that provides read and write privileges in Discover , Visualize , and Dashboard .

  8. Save your new role.

  9. Create a user account with the proper roles.Go to Management > Users , add a new user, and assign the user the built-in reporting_user role and your new custom role, custom_reporting_user .

Thanks
Rashmi

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.