- Kibana Guide: other versions:
- What is Kibana?
- What’s new in 7.12
- Kibana concepts
- Quick start
- Set up
- Install Kibana
- Configure Kibana
- Alerting and action settings
- APM settings
- Banners settings
- Development tools settings
- Graph settings
- Fleet settings
- i18n settings
- Logs settings
- Metrics settings
- Machine learning settings
- Monitoring settings
- Reporting settings
- Secure settings
- Search sessions settings
- Security settings
- Spaces settings
- Task Manager settings
- Telemetry settings
- Start and stop Kibana
- Access Kibana
- Securing access to Kibana
- Add data
- Upgrade Kibana
- Embed Kibana content in a web page
- Configure monitoring
- Configure security
- Production considerations
- Discover
- Dashboard
- Canvas
- Maps
- Machine learning
- Graph
- Observability
- APM
- Elastic Security
- Dev Tools
- Stack Monitoring
- Stack Management
- Fleet
- Reporting
- Alerting and Actions
- REST API
- Kibana plugins
- Accessibility
- Release notes
- Developer guide
IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Kibana privileges
editKibana privileges
editKibana privileges grant users access to features within Kibana. Roles have privileges to determine whether users have write or read access.
Base privileges
editAssigning a base privilege grants access to all Kibana features, such as Discover, Dashboard, Visualize Library, and Canvas.
Assigning base privileges
editFrom the role management screen:

From the role management API:
PUT /api/security/role/my_kibana_role { "elasticsearch": { "cluster" : [ ], "indices" : [ ] }, "kibana": [ { "base": ["all"], "feature": {}, "spaces": ["marketing"] } ] }
Feature privileges
editAssigning a feature privilege grants access to a specific feature.
-
all
- Grants full read-write access.
-
read
- Grants read-only access.
Sub-feature privileges
editSome features allow for finer access control than the all
and read
privileges.
This additional level of control is available in the Gold subscription level and higher.
Assigning feature privileges
editFrom the role management screen:

From the role management API:
PUT /api/security/role/my_kibana_role { "elasticsearch": { "cluster" : [ ], "indices" : [ ] }, "kibana": [ { "base": [], "feature": { "visualize": ["all"], "dashboard": ["read", "url_create"] }, "spaces": ["marketing"] } ] }
On this page
Was this helpful?
Thank you for your feedback.