# Mulitenant dashboard/visualization sharing

**URL:** <https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705>\
**Category:** Search Guard\
**Created:** [December 6, 2019, 9:27am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705 "2019-12-06T09:27:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![NIckgregz](https://avatars.discourse-cdn.com/v4/letter/n/b5ac83/32.png) [@NIckgregz](https://forum.search-guard.com/u/NIckgregz)\
**Post date:** [December 6, 2019, 9:27am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705/1 "2019-12-06T09:27:48Z")

</div>

Is there a way to share dashboards/visualizations between tenants but show only appropriate data related to each private tenant.  
Adding a dashboard to the global tenant (encompassing the index pattern of all private tenants \*) throws an unauthorized error when trying to show that embedded dashboard to a private tenant because the private tenant has access only to its part of the data.  
The other possible solution is to create the same visualization/dashboard object and use the import API to push it upon on each tenant creation so basically each tenant has the same visualization but its on object.  
Is the later a viable option and are there any other ways this could be achieved?

---

<div class="post-metadata">

**Author:** ![hsaly](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/hsaly/32/21_2.png) [@hsaly](https://forum.search-guard.com/u/hsaly)\
**Post date:** [December 6, 2019, 11:52am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705/2 "2019-12-06T11:52:15Z")

</div>

Assigned @jkressin on December 6, 2019, 11:52am UTC



---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [December 17, 2019, 11:00am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705/3 "2019-12-17T11:00:55Z")

</div>

The Global tenant is shared with every user. All Kibana applications objects that were created under the Global tenant should be visible to all users.

> **[Multitenancy](https://docs.search-guard.com/latest/kibana-multi-tenancy#kibana-tenant-configuration)**
>
> Search Guard adds true multi tenancy to Kibana. Separate your dashboards and visualizations by users and roles.

Can you paste the error here?

Also, please add the following data:

- sgconfig yml files
- kibana.yml
- elasticsearch.yml
- Kibana log
- Elasticsearch log

---

<div class="post-metadata">

**Author:** ![NIckgregz](https://avatars.discourse-cdn.com/v4/letter/n/b5ac83/32.png) [@NIckgregz](https://forum.search-guard.com/u/NIckgregz)\
**Post date:** [December 18, 2019, 9:08am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705/4 "2019-12-18T09:08:23Z")

</div>

The unauthorized error was due to `do_not_fail_on_forbidden` flag being set to `false` and the creation of the visualizations object for individual tenants proved to be possible by targeting the tenant .kibana index which can be found here: [Tenant saved objects .kibana index - #2 by hsaly](https://forum.search-guard.com/t/tenant-saved-objects-kibana-index/1707/2)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [January 8, 2020, 9:08am UTC](https://forum.search-guard.com/t/mulitenant-dashboard-visualization-sharing/1705/5 "2020-01-08T09:08:28Z")

</div>

Closed on January 8, 2020, 9:08am UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
