# Restrict Kibana apps access

**URL:** <https://forum.search-guard.com/t/restrict-kibana-apps-access/1338>\
**Category:** Search Guard\
**Created:** [February 19, 2019, 12:38am UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338 "2019-02-19T00:38:38Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adrien\_Yhuel](https://avatars.discourse-cdn.com/v4/letter/a/a587f6/32.png) [@Adrien\_Yhuel](https://forum.search-guard.com/u/Adrien_Yhuel)\
**Post date:** [February 19, 2019, 12:38am UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/1 "2019-02-19T00:38:38Z")

</div>

Hello,

I’m searching for Kibana access management tools, and I found SearchGuard.

After reading the docs, I understood that it can restrict access on Elasticsearch indices, but I wondered if I can control access on Kibana apps, like “Monitoring”, “Management”, …

I want to have :

- “monitoring” users that can access to dashboards, visualisations, timelion, Sentinl, custom plugins

- “admin” users that can access all of above, plus management, monitoring, dev tools.

Is it possible to have such restrictions, or have I to find another tool ?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [February 19, 2019, 6:00pm UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/2 "2019-02-19T18:00:46Z")

</div>

Not at the moment, but we are working on this exact feature and will release it most probably in Q1 this year.

> **···**
>
> On Tuesday, February 19, 2019 at 1:38:38 AM UTC+1, Adrien Yhuel wrote:
> 
> > Hello,
> 
> > 
> 
> > I’m searching for Kibana access management tools, and I found SearchGuard.
> 
> > 
> 
> > After reading the docs, I understood that it can restrict access on Elasticsearch indices, but I wondered if I can control access on Kibana apps, like “Monitoring”, “Management”, …
> 
> > 
> 
> > I want to have :
> 
> > - “monitoring” users that can access to dashboards, visualisations, timelion, Sentinl, custom plugins
> 
> > - “admin” users that can access all of above, plus management, monitoring, dev tools.
> 
> > 
> 
> > Is it possible to have such restrictions, or have I to find another tool ?

---

<div class="post-metadata">

**Author:** ![Adrien\_Yhuel](https://avatars.discourse-cdn.com/v4/letter/a/a587f6/32.png) [@Adrien\_Yhuel](https://forum.search-guard.com/u/Adrien_Yhuel)\
**Post date:** [February 19, 2019, 6:11pm UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/3 "2019-02-19T18:11:01Z")

</div>

@Jochen that’s a great news then !

I think we can start by having only full access and read only users for now 😁.

Will it be a free feature, or only in enterprise version?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [February 19, 2019, 6:15pm UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/4 "2019-02-19T18:15:18Z")

</div>

99% it will be a Community Edition feature.

> **···**
>
> On Tuesday, February 19, 2019 at 7:03:55 PM UTC+1, Adrien Yhuel wrote:
> 
> > @Jochen that’s a great news then !
> > 
> > I think we can start by having only full access and read only users for now 😁.
> 
> > Will it be a free feature, or only in enterprise version?

---

<div class="post-metadata">

**Author:** ![Adrien\_Yhuel](https://avatars.discourse-cdn.com/v4/letter/a/a587f6/32.png) [@Adrien\_Yhuel](https://forum.search-guard.com/u/Adrien_Yhuel)\
**Post date:** [February 19, 2019, 6:17pm UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/5 "2019-02-19T18:17:23Z")

</div>

👍👍

> **···**
>
> Le mardi 19 février 2019 19:15:18 UTC+1, Jochen Kressin a écrit :
> 
> > 99% it will be a Community Edition feature.
> > 
> > On Tuesday, February 19, 2019 at 7:03:55 PM UTC+1, Adrien Yhuel wrote:
> > 
> > > @Jochen that’s a great news then !
> > > 
> > > I think we can start by having only full access and read only users for now 😁.
> 
> > > Will it be a free feature, or only in enterprise version?

---

<div class="post-metadata">

**Author:** ![rhesa\_mahendra](https://avatars.discourse-cdn.com/v4/letter/r/8baadc/32.png) [@rhesa\_mahendra](https://forum.search-guard.com/u/rhesa_mahendra)\
**Post date:** [March 8, 2019, 8:18am UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/6 "2019-03-08T08:18:18Z")

</div>

👍👍

---

<div class="post-metadata">

**Author:** ![nilei](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/nilei/32/871_2.png) [@nilei](https://forum.search-guard.com/u/nilei)\
**Post date:** [September 14, 2020, 7:30am UTC](https://forum.search-guard.com/t/restrict-kibana-apps-access/1338/7 "2020-09-14T07:30:28Z")

</div>

Hi @jkressin, is there any update for this feature? I searched the documentation and the forum for keywords like “Kibana”, “apps”, “control” and similar, but can only find your statements about a new feature that will make it into the community edition in Q1 2019. Did I miss something or is it just a little delayed?

Thanks so much for your work!

– Cheers, Nils
