IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Kibana privileges
editKibana privileges
editKibana privileges grant users access to features within Kibana. Roles have privileges to determine whether users have write or read access.
Base privileges
editAssigning a base privilege grants access to all Kibana features, such as Discover, Dashboard, Visualize Library, and Canvas.
Assigning base privileges
editFrom the role management screen:
From the role management API:
PUT /api/security/role/my_kibana_role { "elasticsearch": { "cluster" : [ ], "indices" : [ ] }, "kibana": [ { "base": ["all"], "feature": {}, "spaces": ["marketing"] } ] }
Feature privileges
editAssigning a feature privilege grants access to a specific feature.
-
all
- Grants full read-write access.
-
read
- Grants read-only access.
Sub-feature privileges
editSome features allow for finer access control than the all
and read
privileges.
This additional level of control is a subscription feature.
Assigning feature privileges
editFrom the role management screen:
From the role management API:
PUT /api/security/role/my_kibana_role { "elasticsearch": { "cluster" : [ ], "indices" : [ ] }, "kibana": [ { "base": [], "feature": { "visualize": ["all"], "dashboard": ["read", "url_create"] }, "spaces": ["marketing"] } ] }