Kibana role managementedit

To create a role that grants Kibana privileges, go to Management → Security → Roles and click Create role.

Adding Kibana privilegesedit

To assign Kibana privileges to the role, click Add space privilege in the Kibana section.

Add space privileges

Open the Spaces selection control to specify whether to grant the role access to all spaces * Global (all spaces) or one or more individual spaces. If you select * Global (all spaces), you can’t select individual spaces until you clear your selection.

Use the Privilege menu to grant access to features. The default is Custom, which you can use to grant access to individual features. Otherwise, you can grant read and write access to all current and future features by selecting All, or grant read access to all current and future features by selecting Read.

When using the Customize by feature option, you can choose either All, Read or None for access to each feature. As new features are added to Kibana, roles that use the custom option do not automatically get access to the new features. You must manually update the roles.

Machine Learning and Stack Monitoring rely on built-in roles to grant access. When a user is assigned the appropriate roles, the Machine Learning and Stack Monitoring application are available; otherwise, these applications are not visible.

To apply your changes, click Create space privilege. The space privilege shows up under the Kibana privileges section of the role.

Create space privilege

Feature availabilityedit

Features are available to users when their roles grant access to the features, and those features are visible in their current space. The following matrix explains when features are available to users when controlling access via spaces and role-based access control:

Spaces configRole configResult

Feature hidden

Feature disabled

Feature not available

Feature hidden

Feature enabled

Feature not available

Feature visible

Feature disabled

Feature not available

Feature visible

Feature enabled

Feature available

Assigning different privileges to different spacesedit

Using the same role, it’s possible to assign different privileges to different spaces. After you’ve added space privileges, click Add space privilege. If you’ve already added privileges for either * Global (all spaces) or an individual space, you will not be able to select these in the Spaces selection control.

Additionally, if you’ve already assigned privileges at * Global (all spaces), you are only able to assign additional privileges to individual spaces. Similar to the behavior of multiple roles granting the union of all privileges, space privileges are also a union. If you’ve already granted the user the All privilege at * Global (all spaces), you’re not able to restrict the role to only the Read privilege at an individual space.

Privilege summaryedit

To view a summary of the privileges granted, click View privilege summary.

View privilege summary

Example 1: Grant all access to Dashboard at an individual spaceedit

  1. Click Add space privilege.
  2. For Spaces, select an individual space.
  3. For Privilege, leave the default selection of Custom.
  4. For the Dashboard feature, select All
  5. Click Create space privilege.
Privilege example 1

Example 2: Grant all access to one space and read access to anotheredit

  1. Click Add space privilege.
  2. For Spaces, select the first space.
  3. For Privilege, select All.
  4. Click Create space privilege.
  5. Click Add space privilege.
  6. For Spaces, select the second space.
  7. For Privilege, select Read.
  8. Click Create space privilege.
Privilege example 2

Example 3: Grant read access to all spaces and write access to an individual spaceedit

  1. Click Add space privilege.
  2. For Spaces, select * Global (all spaces).
  3. For Privilege, select Read.
  4. Click Create space privilege.
  5. Click Add space privilege.
  6. For Spaces, select the individual space.
  7. For Privilege, select All.
  8. Click Create space privilege.
Privilege example 3