XPACK -Security

Elastic Stack Elasticsearch
#1

Hi All,

We have purchased Xpack and we have upgraded to new version to 5.3 ,Just want to know if there is any way to restrict dashboard users like read only access to the dashboards created in the kibana. So that they could play around but they cant edit or delete the visualisations created.

Please let me know if anyone has suggestion on it .

Thanks,
Raj

#2

Hi Raj,

Yes, you can create a role that is similar to the kibana_user role, but only grants read (not write) access to the .kibana index. That will allow the user to access KIbana and see visualizations/dashboards, but not save them.

Thanks,
Steve

#3

Thank you for the response , before I do that i just logged in to kibana user to confirm if am able to see dashboard in the kibana user , but all the dashboard values are zero

only if iam using superuser am able to see the dashboard

Thanks,
Raj

#4

Hi Raj,

Your non-super-user account must have the kibana_user role (or the read-only version of this that I described above), and another role that grants read access to the actual indexes that contain the data.

From your screenshot, it looks like your current user doesn't have access to any data.

Thanks,
Steve

#5

Hi Skearn,

Thank alot for the very quick response,

I created a new role naming New1

it looks like this

image.png1108×554 19 KB

I copied the same from the kibana user which looks like the same except delete option which i removed it

image.png1145×593 19.2 KB

Thanks,
Raj

#6

Am i doing any mistakes ,please do let me know :slight_smile:

#7

Hi Raj,

As I mentioned, your user will need to be assigned 2 roles:

  1. The read-only version of the kibana_user role, which it looks like you successfully created and called New1.
  2. A new role that grants permission to the indexes that contain the data you want that user to be able to see. In your case, this is the data that is being displayed on the dashboard you showed the screenshot of earlier.

Thanks,
Steve

#8

Hi Steve,

Thank you for being patience with me ,since we are new to Xpack its taking some time to learn

image.png955×55 1.83 KB

So Now we created a user (test) - he has two roles added one is New 1 and New 2

New 1 looks like this

image.png1040×487 19.2 KB

New 2 looks like this

image.png1150×603 24.5 KB

i nead test user to see the data in logstash_netflow indexes

Are we good to go?

Thanks,
Raj

#9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.