# Limit User Access to modify kibana settings

**URL:** <https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925>\
**Category:** Feature Requests\
**Created:** [August 12, 2020, 10:10pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925 "2020-08-12T22:10:59Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [August 12, 2020, 10:11pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/1 "2020-08-12T22:11:00Z")

</div>

Role based access control to limit some users from modifying Kibana Settings, index patterns, index management, lifecycle policies, rollups, transforms, remote clusters, snapshots, dev tools, etc… While being able to allow access to other users on a per application basis

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [August 13, 2020, 2:12pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/2 "2020-08-13T14:12:19Z")

</div>

This can be done by Search Guard Multitenancy.

> **[Kibana Multi Tenancy | Search Guard | Security for Elasticsearch](https://search-guard.com/kibana-multi-tenancy-search-guard/)**
>
> Search Guard provides Kibana multi tenancy, which makes it possible to separate Dashboards and Visualizations on a per-role basis.

> **[Multitenancy](https://docs.search-guard.com/latest/kibana-multi-tenancy#multitenancy)**
>
> Search Guard adds true multi tenancy to Kibana. Separate your dashboards and visualizations by users and roles.

---

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [August 13, 2020, 2:53pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/3 "2020-08-13T14:53:01Z")

</div>

Multitenancy breaks our cluster due to the shear number of kibana indices created overloading the cluster state.  
Multitenancy does not fullfill the complete request only portions of it, whereas RBAC would.

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [August 14, 2020, 10:29am UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/4 "2020-08-14T10:29:59Z")

</div>

Actually we work on RBAC. Although I can’t give you the time of arrival for this feature right now. Stay tuned to our news.

> Multitenancy breaks our cluster due to the shear number of kibana indices created overloading the cluster state.

Thank you for the feedback. How many indices does the Multitenancy create for you? Do you see any errors in the Kibana or Elasticsearch log? Does Kibana get stuck in the index migration phase? How do you see the cluster is overloaded?

---

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [August 14, 2020, 7:47pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/5 "2020-08-14T19:47:11Z")

</div>

multitenancy creates over 500 indices… One per User… Every time we have tested it, the cluster is healthy until users begin using it… at which point the cluster crashes and is unrecoverable until we disable multi-tenancy…

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [August 17, 2020, 8:49am UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/6 "2020-08-17T08:49:30Z")

</div>

Hi @lzukel. I added this as a high priority issue to the queue. I’ll reach back to you once we have it working.

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [August 17, 2020, 8:52am UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/7 "2020-08-17T08:52:09Z")

</div>

One more question. What SG and Elastic versions do you use?

---

<div class="post-metadata">

**Author:** ![lzukel](https://avatars.discourse-cdn.com/v4/letter/l/4491bb/32.png) [@lzukel](https://forum.search-guard.com/u/lzukel)\
**Post date:** [August 17, 2020, 12:37pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925/8 "2020-08-17T12:37:45Z")

</div>

Currently we are on:  
ES 7.5.2  
SG 40.0.0

We will be upgrading to in the next couple of weeks to:  
ES 7.8.1  
SG latest
