Read only access to dashboard only

[nsi...@gmail.com]

Hi,

I'm looking to create a specific role-based access for user, but limited only to the dashboad part.

No other rights on wazuh, just a specific access to look at dashboards created on Kibana.

Do you think it can be created and how ?

Thank you all for your answers.

Best Regards,

Nicolas

[Raul Del Pozo Moreno]

Hi nsirot,

From what I understand from your question, you want a user who only has access to the dashboards created (Kibana - Visualize). The user should not have access to create dashboards, see the alerts and in conclusion, the rest of the menu? Is this what you want?

Regards, Raúl.

[Nicolas Sirot]

Hi Raul,

Yes, it's exactly that : only a read only on the dashboards, and nothing else.

Thank you !

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh mailing list" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/I17KqxBwR0U/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/01cdfb04-4080-4300-b874-806dc7e60f9en%40googlegroups.com.

[Raul Del Pozo Moreno]

Hi nsirot,

Can you tell me if you are using Open Distro for Elasticsearch (ODFE) or x-pack? To know if you are using x-pack you can look at /usr/share/kibana/plugins/

Depending on one or the other, a more restrictive access can be specified. In the case of ODFE, it cannot be configured to access or not certain sections, but the actions to be carried out can be limited in such a way that it is not allowed to create or modify (an error message appears informing that there are no permissions).

If it is x-pack, it can be customized a little more. I leave you a couple of links so you can see a little about both:

- ODFE: https://opendistro.github.io/for-elasticsearch-docs/docs/security/access-control/users-roles/#set-up-a-read-only-user-in-kibana
- x-pack: https://www.elastic.co/guide/en/kibana/7.x/kibana-privileges.html#kibana-feature-privileges

I also leave you the thread of another user to whom I responded on how to create a read-only user in case it helps:

- https://groups.google.com/g/wazuh/c/umKDu0HmLBc

Regards, Raúl.