# Specific Dashboards for specific users

**URL:** <https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490>\
**Category:** Search Guard\
**Created:** [May 10, 2019, 9:53am UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490 "2019-05-10T09:53:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 10, 2019, 9:53am UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/1 "2019-05-10T09:53:09Z")

</div>

Hi,

I have search guard up and running with kibana. I have my configuration down to dashboards only for specific users. The last piece of functionality I want is to set specific dashboards to a specific group of users i.e. groupA and groupB. So far i have created two new index’s to create two separate dashboards. Is this the way to go? I originally copied the sg\_kibana\_user configuration, changed the name and set a new index belonging to one of the new dashboards i created. It sounds logical to me. Can someone help me with this? Really struggling with this now

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 10, 2019, 1:07pm UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/2 "2019-05-10T13:07:07Z")

</div>

For separating dashboards and visualizations based on roles, you would need to use the SG Multi Tenancy feature which is an Enterprise feature:

> **[Multitenancy](https://docs.search-guard.com/latest/kibana-multi-tenancy)**
>
> Search Guard adds true multi tenancy to Kibana. Separate your dashboards and visualizations by users and roles.

Creating separate indices will not really help. Per default, Kibana stores all objects in a single index, and it also uses the internal Kibana server user to read and write this index. So without multi tenancy you are probably out of luck.

There is one workaround which which I can think of right now. You could use a proxy that intercepts the calls from KI to ES, and then rewrite the index name. This is the approach that this project uses:

> **[GitHub - wtakase/kibana-own-home: Multi-tenancy for Kibana](https://github.com/wtakase/kibana-own-home)**
>
> Multi-tenancy for Kibana. Contribute to wtakase/kibana-own-home development by creating an account on GitHub.

However, I have not followed the progress of the own home project, so I cannot tell if it is still maintained or not.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 10, 2019, 1:09pm UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/3 "2019-05-10T13:09:23Z")

</div>



---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 10, 2019, 1:11pm UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/4 "2019-05-10T13:11:37Z")

</div>

I’ll definitely give it a look. Thanks again

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 10, 2019, 4:22pm UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/5 "2019-05-10T16:22:43Z")

</div>

I have been looking into the own home solution and it seems very tricky to implement. I also looked into creating multiple kibana instances but in reality that isn’t practical in a sense that I would need to install search guard on each instance leaving me with no centralised admin control. Can you think of any other ideas? This is looking impossible with the community version

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [May 31, 2019, 4:22pm UTC](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/6 "2019-05-31T16:22:44Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
