# Kibana Read Only Dashboards **URL:** \ **Category:** Search Guard\ **Created:** [August 20, 2018, 8:19am UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079 "2018-08-20T08:19:15Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 20, 2018, 8:19am UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/1 "2018-08-20T08:19:15Z")
Hi, I’m running ELK 6.32 Stack with SearchGuard 6. I have a doubt regarding to read only modes in Kibana 1. Is it posiible to define read only dashboards in kibana? 2. Is it dependent of the multy tennancy feature? Thank you Regards Ana When asking questions, please provide the following information: - Search Guard and Elasticsearch version - Installed and used enterprise modules, if any - JVM version and operating system version - Search Guard configuration files - Elasticsearch log messages on debug level - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [August 21, 2018, 1:25am UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/2 "2018-08-21T01:25:35Z")
Hi, it is possible to define read-only dashboards, but this is implemented via the multi-tenancy feature as you indicsted. With multi-tenancy, you can define multiple tenants per role, and then assign read/write or read-only permissions to these tenants. Without multi-tenancy (Kibana default behavior), all saved objects end up in the same index without the possibility to separate them on a per-role basis or to assign permissions. > **···** > > On Monday, August 20, 2018 at 3:19:15 AM UTC-5, [anabella.cristaldi@gmail.com](mailto:anabella.cristaldi@gmail.com) wrote: > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > I have a doubt regarding to read only modes in Kibana > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > Thank you > > > Regards > > > Ana > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > - Search Guard and Elasticsearch version > > > - Installed and used enterprise modules, if any > > > - JVM version and operating system version > > > - Search Guard configuration files > > > - Elasticsearch log messages on debug level > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 21, 2018, 10:38am UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/3 "2018-08-21T10:38:33Z")
Thank you for the response. We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. For each client we want to > 1. Define a custom index > 1. Define a tenant > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > 1. Have a read only user over that tenant in order to provide read only access to that dashboards I have enabled the multitenancy feature but i’m not able to define the tenants. It is not clear for me in the doc Any help will be appreciated Regards Ana > **···** > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > I have a doubt regarding to read only modes in Kibana > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > Thank you > > > Regards > > > Ana > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > - Search Guard and Elasticsearch version > > > - Installed and used enterprise modules, if any > > > - JVM version and operating system version > > > - Search Guard configuration files > > > - Elasticsearch log messages on debug level > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 21, 2018, 12:38pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/4 "2018-08-21T12:38:47Z")
In order to create the tenant: I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) Regards and thank you Ana > **···** > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > Thank you for the response. > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > For each client we want to > > > > 1. Define a custom index > > > > 1. Define a tenant > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > It is not clear for me in the doc > > > Any help will be appreciated > > > > > > Regards > > > Ana > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > Thank you > > > > Regards > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > - Search Guard and Elasticsearch version > > > > - Installed and used enterprise modules, if any > > > > - JVM version and operating system version > > > > - Search Guard configuration files > > > > - Elasticsearch log messages on debug level > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 21, 2018, 1:11pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/5 "2018-08-21T13:11:28Z")
Hi, This is what I mean: 1. Define the role with the asociated Tenants > GET /\_searchguard/api/roles/sg\_read\_only > {“sg\_read\_only”:{“cluster”:[“READ”,“SEARCH”],“tenants”:{“T1”:“RW”,“T2”:“RO”},“indices”:{“logstash-\*”:{“doc”:[“READ”,“SEARCH”]}}}} 1. Define a user with that role > GET /\_searchguard/api/internalusers/kibanaro > {“kibanaro”:{“password”:“”,“roles”:[“sg\_read\_only”],“hash”:“xxxxx”}} And no tenants other than global and private are visible (see attachment) What I’m doing wrong? Thank you Regards Ana ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/0c48641c6527e36c0d9ae6ef387dca02f23ae845.jpeg) > **···** > > El martes, 21 de agosto de 2018, 14:38:48 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > In order to create the tenant: > > I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) > > > Regards and thank you > > > Ana > > > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > Thank you for the response. > > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > > For each client we want to > > > > > 1. Define a custom index > > > > > 1. Define a tenant > > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > > It is not clear for me in the doc > > > > Any help will be appreciated > > > > > > > > Regards > > > > Ana > > > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > Thank you > > > > > Regards > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > - Search Guard and Elasticsearch version > > > > > - Installed and used enterprise modules, if any > > > > > - JVM version and operating system version > > > > > - Search Guard configuration files > > > > > - Elasticsearch log messages on debug level > > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [August 21, 2018, 1:13pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/6 "2018-08-21T13:13:33Z")
This may be a stupid question, but have you updated the config via sgadmin after making the changes? If yes, can you post your role definition including the tenant here? > **···** > > On Tuesday, August 21, 2018 at 7:38:48 AM UTC-5, [anabella.cristaldi@gmail.com](mailto:anabella.cristaldi@gmail.com) wrote: > > > In order to create the tenant: > > I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) > > > Regards and thank you > > > Ana > > > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > Thank you for the response. > > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > > For each client we want to > > > > > 1. Define a custom index > > > > > 1. Define a tenant > > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > > It is not clear for me in the doc > > > > Any help will be appreciated > > > > > > > > Regards > > > > Ana > > > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > Thank you > > > > > Regards > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > - Search Guard and Elasticsearch version > > > > > - Installed and used enterprise modules, if any > > > > > - JVM version and operating system version > > > > > - Search Guard configuration files > > > > > - Elasticsearch log messages on debug level > > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 21, 2018, 1:15pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/7 "2018-08-21T13:15:10Z")
Hi, I realize that the role mapping was missing. Thank you Regards Ana > **···** > > El martes, 21 de agosto de 2018, 15:11:28 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > Hi, > > > This is what I mean: > > > > > > 1. Define the role with the asociated Tenants > > > > GET /\_searchguard/api/roles/sg\_read\_only > > > > > > > {“sg\_read\_only”:{“cluster”:[“READ”,“SEARCH”],“tenants”:{“T1”:“RW”,“T2”:“RO”},“indices”:{“logstash-\*”:{“doc”:[“READ”,“SEARCH”]}}}} > > > > > > 1. Define a user with that role > > > > GET /\_searchguard/api/internalusers/kibanaro > > > > {“kibanaro”:{“password”:“”,“roles”:[“sg\_read\_only”],“hash”:“xxxxx”}} > > > > > > And no tenants other than global and private are visible (see attachment) > > > > > > What I’m doing wrong? > > > Thank you > > > Regards > > > Ana > > > > > > > > > El martes, 21 de agosto de 2018, 14:38:48 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > In order to create the tenant: > > > I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) > > > > Regards and thank you > > > > Ana > > > > > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > Thank you for the response. > > > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > > > For each client we want to > > > > > > 1. Define a custom index > > > > > > 1. Define a tenant > > > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > > > It is not clear for me in the doc > > > > > Any help will be appreciated > > > > > > > > > > Regards > > > > > Ana > > > > > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > > > > Thank you > > > > > > Regards > > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > > - Search Guard and Elasticsearch version > > > > > > - Installed and used enterprise modules, if any > > > > > > - JVM version and operating system version > > > > > > - Search Guard configuration files > > > > > > - Elasticsearch log messages on debug level > > > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [August 21, 2018, 1:17pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/8 "2018-08-21T13:17:30Z")
Yes, that’s what I wanted to post as well 😉 You can always use the /\_searchguard/authinfo endpoint for checking the mapped roles of the currently logged in user. Quite useful when debugging. Let me know if you have more questions regarding your PoC. > **···** > > On Tuesday, August 21, 2018 at 8:15:11 AM UTC-5, [anabella.cristaldi@gmail.com](mailto:anabella.cristaldi@gmail.com) wrote: > > > Hi, I realize that the role mapping was missing. > > > Thank you > > > Regards > > > Ana > > > > El martes, 21 de agosto de 2018, 15:11:28 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > Hi, > > > > This is what I mean: > > > > > > > > 1. Define the role with the asociated Tenants > > > > > GET /\_searchguard/api/roles/sg\_read\_only > > > > > > > > > {“sg\_read\_only”:{“cluster”:[“READ”,“SEARCH”],“tenants”:{“T1”:“RW”,“T2”:“RO”},“indices”:{“logstash-\*”:{“doc”:[“READ”,“SEARCH”]}}}} > > > > > > > > 1. Define a user with that role > > > > > GET /\_searchguard/api/internalusers/kibanaro > > > > > {“kibanaro”:{“password”:“”,“roles”:[“sg\_read\_only”],“hash”:“xxxxx”}} > > > > > > > > And no tenants other than global and private are visible (see attachment) > > > > > > > > What I’m doing wrong? > > > > Thank you > > > > Regards > > > > Ana > > > > > > > > > > > > El martes, 21 de agosto de 2018, 14:38:48 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > In order to create the tenant: > > > > I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) > > > > > Regards and thank you > > > > > Ana > > > > > > > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > Thank you for the response. > > > > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > > > > For each client we want to > > > > > > > 1. Define a custom index > > > > > > > 1. Define a tenant > > > > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > > > > It is not clear for me in the doc > > > > > > Any help will be appreciated > > > > > > > > > > > > Regards > > > > > > Ana > > > > > > > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > > > > > > > Thank you > > > > > > > Regards > > > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > > > - Search Guard and Elasticsearch version > > > > > > > - Installed and used enterprise modules, if any > > > > > > > - JVM version and operating system version > > > > > > > - Search Guard configuration files > > > > > > > - Elasticsearch log messages on debug level > > > > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![anabella.cristaldi](https://avatars.discourse-cdn.com/v4/letter/a/aca169/32.png) [@anabella.cristaldi](https://forum.search-guard.com/u/anabella.cristaldi)\ **Post date:** [August 21, 2018, 3:00pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/9 "2018-08-21T15:00:17Z")
Thank you Jochen, I was able to complete the initial scenario of the POC. Regards Ana > **···** > > El martes, 21 de agosto de 2018, 15:17:30 (UTC+2), Jochen Kressin escribió: > > > > Hi, I realize that the role mapping was missing. > > > > Thank you > > > > Regards > > > > Ana > > > > > > El martes, 21 de agosto de 2018, 15:11:28 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > Hi, > > > > > This is what I mean: > > > > > > > > > > 1. Define the role with the asociated Tenants > > > > > > GET /\_searchguard/api/roles/sg\_read\_only > > > > > > > > > > > {“sg\_read\_only”:{“cluster”:[“READ”,“SEARCH”],“tenants”:{“T1”:“RW”,“T2”:“RO”},“indices”:{“logstash-\*”:{“doc”:[“READ”,“SEARCH”]}}}} > > > > > > > > > > 1. Define a user with that role > > > > > > GET /\_searchguard/api/internalusers/kibanaro > > > > > > {“kibanaro”:{“password”:“”,“roles”:[“sg\_read\_only”],“hash”:“xxxxx”}} > > > > > > > > > > And no tenants other than global and private are visible (see attachment) > > > > > > > > > > What I’m doing wrong? > > > > > Thank you > > > > > Regards > > > > > Ana > > > > > > > > > > > > > > > El martes, 21 de agosto de 2018, 14:38:48 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > In order to create the tenant: > > > > > I go to roles, and add a tenant to that role. Once I’m loging with a user in this role I’m not able to see the new tenant (only Global and Private tenants) > > > > > > Regards and thank you > > > > > > Ana > > > > > > > > > > El martes, 21 de agosto de 2018, 12:38:33 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > > > Thank you for the response. > > > > > > > We are doing a POC in order to test the multitenancy feature. The goal is to present readonly dashboards to diferent clients. > > > > > > > For each client we want to > > > > > > > > 1. Define a custom index > > > > > > > > 1. Define a tenant > > > > > > > > 1. Have a RW user that indexes the data in the custom index and create the visualizations and dashboard in the tenant > > > > > > > > 1. Have a read only user over that tenant in order to provide read only access to that dashboards > > > > > > > > > > > > > > I have enabled the multitenancy feature but i’m not able to define the tenants. > > > > > > > It is not clear for me in the doc > > > > > > > Any help will be appreciated > > > > > > > > > > > > > > Regards > > > > > > > Ana > > > > > > > > > > > > > > El lunes, 20 de agosto de 2018, 10:19:15 (UTC+2), [anabella....@gmail.com](mailto:anabella....@gmail.com) escribió: > > > > > > > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > > > > > > > > > > Thank you > > > > > > > > Regards > > > > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > > > > - Search Guard and Elasticsearch version > > > > > > > > - Installed and used enterprise modules, if any > > > > > > > > - JVM version and operating system version > > > > > > > > - Search Guard configuration files > > > > > > > > - Elasticsearch log messages on debug level > > > > > > > > - Other installed Elasticsearch or Kibana plugins, if any > > > Yes, that’s what I wanted to post as well 😉 You can always use the /\_searchguard/authinfo endpoint for checking the mapped roles of the currently logged in user. Quite useful when debugging. Let me know if you have more questions regarding your PoC. > > > > On Tuesday, August 21, 2018 at 8:15:11 AM UTC-5, [anabella....@gmail.com](mailto:anabella....@gmail.com) wrote: ---
**Author:** ![tuser4198](https://avatars.discourse-cdn.com/v4/letter/t/db5fbb/32.png) [@tuser4198](https://forum.search-guard.com/u/tuser4198)\ **Post date:** [October 9, 2018, 1:33pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/10 "2018-10-09T13:33:51Z")
Hi, I am newer for SG. I want to confirm: 1. whether multy tennancy is only for commercialize. 2. whether below config also can define read only dashboards ```auto searchguard.readonly_mode.roles: ["sg_read_only_1", "sg_read_only_2", ...] ``` 在 2018年8月21日星期二 UTC+8上午9:25:35，Jochen Kressin写道： > **···** > > > Hi, > > > it is possible to define read-only dashboards, but this is implemented via the multi-tenancy feature as you indicsted. With multi-tenancy, you can define multiple tenants per role, and then assign read/write or read-only permissions to these tenants. > > > > > > Without multi-tenancy (Kibana default behavior), all saved objects end up in the same index without the possibility to separate them on a per-role basis or to assign permissions. > > > > On Monday, August 20, 2018 at 3:19:15 AM UTC-5, [anabella....@gmail.com](mailto:anabella....@gmail.com) wrote: > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > Thank you > > > > Regards > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > - Search Guard and Elasticsearch version > > > > - Installed and used enterprise modules, if any > > > > - JVM version and operating system version > > > > - Search Guard configuration files > > > > - Elasticsearch log messages on debug level > > > > - Other installed Elasticsearch or Kibana plugins, if any ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [October 9, 2018, 5:30pm UTC](https://forum.search-guard.com/t/kibana-read-only-dashboards/1079/11 "2018-10-09T17:30:09Z")
Hi, 1. yes, this is a commercial feature 2. only partly. You can use the dashboard only feature to limit Kibana accessibility to dashboards (only) by setting the readonly\_mode.roles as you described. However, this feature is implemented on Kibana only, so users would still be able to access the .kibana index by directly querying Elasticsearch. > **···** > > On Tuesday, October 9, 2018 at 3:33:51 PM UTC+2, [tuser4198@gmail.com](mailto:tuser4198@gmail.com) wrote: > > > Hi, > > I am newer for SG. I want to confirm: > > > 1. whether multy tennancy is only for commercialize. > > > 1. whether below config also can define read only dashboards > > > ```auto > > searchguard.readonly_mode.roles: ["sg_read_only_1", "sg_read_only_2", ...] > > > > ``` > > > > 在 2018年8月21日星期二 UTC+8上午9:25:35，Jochen Kressin写道： > > > > > Hi, > > > > it is possible to define read-only dashboards, but this is implemented via the multi-tenancy feature as you indicsted. With multi-tenancy, you can define multiple tenants per role, and then assign read/write or read-only permissions to these tenants. > > > > > > > > Without multi-tenancy (Kibana default behavior), all saved objects end up in the same index without the possibility to separate them on a per-role basis or to assign permissions. > > > > > > On Monday, August 20, 2018 at 3:19:15 AM UTC-5, [anabella....@gmail.com](mailto:anabella....@gmail.com) wrote: > > > > > > > Hi, I’m running ELK 6.32 Stack with SearchGuard 6. > > > > > I have a doubt regarding to read only modes in Kibana > > > > > > > > > > 1. Is it posiible to define read only dashboards in kibana? > > > > > 1. Is it dependent of the multy tennancy feature? > > > > > > > > > > > > > > > Thank you > > > > > Regards > > > > > Ana > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > When asking questions, please provide the following information: > > > > > - Search Guard and Elasticsearch version > > > > > - Installed and used enterprise modules, if any > > > > > - JVM version and operating system version > > > > > - Search Guard configuration files > > > > > - Elasticsearch log messages on debug level > > > > > - Other installed Elasticsearch or Kibana plugins, if any