Menu
is there a way to set some sort of permissions when sharing kibana dashboard with others. I'm worried that someone would either delete it or make changes and save it. I googled but didn't find anything.
415
Just create a space and a dashboard (index pattern, visualizations ecc...) in it. Create (with an admin user) a role with access restricted to that index (in read-only mode) and with permission to access to that specific space only, only to Dashboard section.
Granting access to Kibanaedit The Elastic Stack comes with the kibana_admin built-in role, which you can use to grant access to all Kibana features in all spaces. To grant users access to a subset of spaces or features, you can create a custom role that grants the desired Kibana privileges.
To manage privileges in Kibana, open the main menu, then click Stack Management > Roles. The built-in kibana_admin role will grant access to Kibana with administrator privileges. Alternatively, you can create additional roles that grant limited access to Kibana.
A lot has happened since the question was asked. Role based access control is now available in the community edition since May.
https://www.elastic.co/blog/security-for-elasticsearch-is-now-free
56
Without shield, you can try to lock .kibana index on read only mode :
curl -XPUT 'localhost:9200/.kibana/_settings' -d '{ "index.blocks.read_only" : true }'
It's working well, nobody can save/delete a dashboard / search / visualization. If user resize / move something on dashboard he can reset easily by bookmarking dashboard without parameters in url (or load it directly).
You can check more options about indices : https://www.elastic.co/guide/en/elasticsearch/reference/1.4/indices-update-settings.html
38
When you go to the configure items of widgets and the dashboard (top right of the screen) you can set the editable flag to false. Beware though, now you cannot change it yourself anymore as well. Other options are available to provide the dashboard as a script, you can export it, enough options. But there is not something like, I am user x and I am the only one who can make changes.
45
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
