Kibana privileges

Kibana privileges grant users access to features within Kibana. Roles have privileges to determine whether users have write or read access.

Base privileges

Assigning a base privilege grants access to all available features in Kibana (Discover, Visualize, Dashboard, and so on).

all
Grants full read-write access.
read
Grants read-only access.

Assigning base privileges

From the role management screen:

Assign base privilege

From the role management API:

PUT /api/security/role/my_kibana_role
{
  "elasticsearch": {
    "cluster" : [ ],
    "indices" : [ ]
  },
  "kibana": [
    {
      "base": ["all"],
      "feature": {},
      "spaces": ["marketing"]
    }
  ]
}

Feature privileges

Assigning a feature privilege grants access to a specific feature.

all
Grants full read-write access.
read
Grants read-only access.

Assigning feature privileges

From the role management screen:

Assign feature privilege

From the role management API:

PUT /api/security/role/my_kibana_role
{
  "elasticsearch": {
    "cluster" : [ ],
    "indices" : [ ]
  },
  "kibana": [
    {
      "base": [],
      "feature": {
        "dashboard": ["all"]
      },
      "spaces": ["marketing"]
    }
  ]
}