Kibana privileges

Kibana privileges grant users access to features within Kibana. Roles have privileges to determine whether users have write or read access.

Base privileges

Assigning a base privilege grants access to all available features in Kibana (Discover, Visualize, Dashboard, and so on).

all

Grants full read-write access.

read

Grants read-only access.

Assigning base privileges

From the role management screen:

Assign base privilege

From the role management API:

  1. PUT /api/security/role/my_kibana_role
  2. {
  3.   "elasticsearch": {
  4.     "cluster" : [ ],
  5.     "indices" : [ ]
  6.   },
  7.   "kibana": [
  8.     {
  9.       "base": ["all"],
  10.       "feature": {},
  11.       "spaces": ["marketing"]
  12.     }
  13.   ]
  14. }

Feature privileges

Assigning a feature privilege grants access to a specific feature.

all

Grants full read-write access.

read

Grants read-only access.

Sub-feature privileges

Some features allow for finer access control than the all and read privileges. This additional level of control is available in the Gold subscription level and higher.

Assigning feature privileges

From the role management screen:

Assign feature privilege

From the role management API:

  1. PUT /api/security/role/my_kibana_role
  2. {
  3.   "elasticsearch": {
  4.     "cluster" : [ ],
  5.     "indices" : [ ]
  6.   },
  7.   "kibana": [
  8.     {
  9.       "base": [],
  10.       "feature": {
  11.         "visualize": ["all"],
  12.         "dashboard": ["read", "url_create"]
  13.       },
  14.       "spaces": ["marketing"]
  15.     }
  16.   ]
  17. }

Most Popular