# X-Pack Security and Kibana Dashboard

**URL:** <https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640>\
**Category:** Kibana\
**Created:** [August 29, 2017, 7:17am UTC](https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640 "2017-08-29T07:17:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mruthyu](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Post date:** [August 29, 2017, 7:17am UTC](https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640/1 "2017-08-29T07:17:23Z")

</div>

This is related to the access permission for the Kibana dashboard. When kibana user has the read only access to the .kibana index the Edit link in the Dashboard needs to be disabled/or shouldn't be displayed. Currently user can click on the Edit link and can edit the individual visualization/s and it is only during the save action the permission error will be displayed. So instead of waiting till user tries to save the visualization, and seeing the error message, it is better the disable or hide the Edit link on the Dashboard page so that user doesn't go through this flow.

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [August 31, 2017, 10:11am UTC](https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640/2 "2017-08-31T10:11:26Z")

</div>

Disabling write access to the Kibana index for the Kibana system user is not a recommended configuration right now. Restricting a user to pure read-only dashboard access is something we are working on and about to release quite soon.

---

<div class="post-metadata">

**Author:** ![mruthyu](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Post date:** [August 31, 2017, 11:00am UTC](https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640/3 "2017-08-31T11:00:21Z")

</div>

Thank you. I mean only the Dashboard user without able to edit any of the visualizations from the dashboard.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 28, 2017, 11:00am UTC](https://discuss.elastic.co/t/x-pack-security-and-kibana-dashboard/98640/4 "2017-09-28T11:00:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.