* Beginning to work on the role management APIs. Added docs for GET * Adding PUT docs * Adding PUT details * Adding delete docs * Fixing linking * Adding Kibana privileges section * Fixing dashboard only mode docs * Fixing a few more references to managing roles * Beginning to work on authorization docs, might be moving some to stack-docs * Collapsing authorization description in the kibana privileges page * Adding audit logging section * Revising the language on the Kibana role management section * Splitting back out the auth/privileges and adding legacy fallback details * Revising language around impact of disabling security * Changing Kibana to {kib} and Elasticsearch to {es} * Beginning to work on developer centric docs * Fixing some formatting, adding some diagrams * Adding note about the role management APIs * Adding overview, fixing small syntax issues * Fixing chunk name for transitioning to application privileges * Adjusting tone for the authorization introduction * Changing the tone and structure of the RBAC docs * Deleting blog stuff after refactoring * Addressing first round of peer review comments * Fixing endpoints links * Peer review suggested edits * Addressing other PR feedback
25 lines
1.3 KiB
Text
25 lines
1.3 KiB
Text
[role="xpack"]
|
|
[[advanced-dashboard-mode-configuration]]
|
|
=== Advanced Configuration for Dashboard Only Mode
|
|
|
|
If {security} is enabled, Kibana has a built-in `kibana_dashboard_only_user`
|
|
role that grants read-only access to {kib}. This role is sufficient
|
|
for most use cases. However, if your setup requires a custom {kib} index, you can create
|
|
your own roles and tag them as *Dashboard only mode*.
|
|
|
|
Go to *Management > Kibana > Advanced Settings* and search for *Dashboard*. By default
|
|
`xpackDashboardMode:roles` is set to `kibana_dashboard_only_user`.
|
|
Here you can add as many roles as you like.
|
|
|
|
[role="screenshot"]
|
|
image:management/dashboard_only_mode/images/advanced_dashboard_mode_role_setup.png["Advanced dashboard mode role setup"]
|
|
|
|
By default, a *dashboard only mode* user doesn't have access to any data indices.
|
|
To grant read-only access to your custom {kib} instance,
|
|
you must assign the read <<kibana-privileges, Kibana privilege>>.
|
|
These privileges are available under *Management > Security > Roles*.
|
|
|
|
For more information on roles and privileges, see {xpack-ref}/authorization.html[User Authorization].
|
|
|
|
[role="screenshot"]
|
|
image:management/dashboard_only_mode/images/custom_dashboard_mode_role.png["Custom dashboard mode role with read permissions on a custom kibana index"]
|