# Who has access to which dashboard with what permission?

**URL:** <https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260>\
**Category:** Kibana\
**Created:** [February 27, 2026, 1:21am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260 "2026-02-27T01:21:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\
**Post date:** [February 27, 2026, 1:21am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260/1 "2026-02-27T01:21:02Z")

</div>

Along our design and build phase. We have created many users and grant many permission to many dashboard. We would like to clean up our environment to know who have what access or roles? Anyone can advice where to start with and further zoom down? Thanks in advance

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [February 27, 2026, 7:50am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260/2 "2026-02-27T07:50:54Z")

</div>

Hello @Whoami1980

Welcome to the Community!!

Could you please share the ELK version & what authentication the Kibana Users are using to login?

Thanks!!

---

<div class="post-metadata">

**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\
**Post date:** [February 27, 2026, 8:43am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260/3 "2026-02-27T08:43:08Z")

</div>

HI TMNT . Our ELK is 8.19 . AD authentication

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [March 1, 2026, 3:05am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260/4 "2026-03-01T03:05:58Z")

</div>

Hello @Whoami1980

Since this is AD i am not sure if there is an easy way to complete this exercise.

List all Elasticsearch roles :  
`GET /_security/role`

List all Role Mappings (AD groups → roles):  
`GET /_security/role_mapping`

I will ask AD team to give export of User/Roles assigned where it is _ELK_ if you are using any naming convention in your Role Mapping to avoid users without no Roles assigned related to ELK.

Now you have list of users/roles assigned or mapped in AD…we have roles & its privileges in Elastic…you can map everything and tighten the roles looking at the complete data.

Thanks!!