63413c047d
* Beginning to work on the role management APIs. Added docs for GET
* Adding PUT docs
* Adding PUT details
* Adding delete docs
* Fixing linking
* Adding Kibana privileges section
* Fixing dashboard only mode docs
* Fixing a few more references to managing roles
* Beginning to work on authorization docs, might be moving some to
stack-docs
* Collapsing authorization description in the kibana privileges page
* Adding audit logging section
* Revising the language on the Kibana role management section
* Splitting back out the auth/privileges and adding legacy fallback
details
* Revising language around impact of disabling security
* Changing Kibana to {kib} and Elasticsearch to {es}
* Beginning to work on developer centric docs
* Fixing some formatting, adding some diagrams
* Adding note about the role management APIs
* Adding overview, fixing small syntax issues
* Fixing chunk name for transitioning to application privileges
* Adjusting tone for the authorization introduction
* Changing the tone and structure of the RBAC docs
* Deleting blog stuff after refactoring
* Addressing first round of peer review comments
* Fixing endpoints links
* Peer review suggested edits
* Addressing other PR feedback
25 lines
1.3 KiB
Text
25 lines
1.3 KiB
Text
[role="xpack"]
|
|
[[advanced-dashboard-mode-configuration]]
|
|
=== Advanced Configuration for Dashboard Only Mode
|
|
|
|
If {security} is enabled, Kibana has a built-in `kibana_dashboard_only_user`
|
|
role that grants read-only access to {kib}. This role is sufficient
|
|
for most use cases. However, if your setup requires a custom {kib} index, you can create
|
|
your own roles and tag them as *Dashboard only mode*.
|
|
|
|
Go to *Management > Kibana > Advanced Settings* and search for *Dashboard*. By default
|
|
`xpackDashboardMode:roles` is set to `kibana_dashboard_only_user`.
|
|
Here you can add as many roles as you like.
|
|
|
|
[role="screenshot"]
|
|
image:management/dashboard_only_mode/images/advanced_dashboard_mode_role_setup.png["Advanced dashboard mode role setup"]
|
|
|
|
By default, a *dashboard only mode* user doesn't have access to any data indices.
|
|
To grant read-only access to your custom {kib} instance,
|
|
you must assign the read <<kibana-privileges, Kibana privilege>>.
|
|
These privileges are available under *Management > Security > Roles*.
|
|
|
|
For more information on roles and privileges, see {xpack-ref}/authorization.html[User Authorization].
|
|
|
|
[role="screenshot"]
|
|
image:management/dashboard_only_mode/images/custom_dashboard_mode_role.png["Custom dashboard mode role with read permissions on a custom kibana index"]
|