Create custum roles for external Users (AD users)

Search Guard
1

Hello, I’m new in Searchguard, and i would like to ask how to assign a Search Guard role to a user in an Active Directory management system (Limit access for some aD users only to some indices). Is that Possible

Note: (Integration with AD was already done and users can access kibana with their AD credentials)

Thanks in Advance

2

Actually, the question is : Does search guard support Index-level Permissions ( Limiting access to indices) for external users.

3

Hi Aymen, we’re not using AD but this is certainly possible. For instance, we’re using both kerberos and openid, and we can assign any kind of permissions to those “external” users. I don’t see why this wouldn’t be possible with AD.

4

Thanks @faxmodem , just hier you mean assigning permission in search guard config or in kerberos side for exemple?

5

In search-guard ! Here’s an example :

roles_mapping:
  foo_query_human:
    users:
      - rickd@EXAMPLE.COM
      - matt@example.com

The first user is authenticated using kerberos (hence the capital letters from the Kerberos realm).
The second user is authenticated using Openid.

1 Like
6

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.