Group tenant_displayname

New Features Ideas
1

Currently the name used for the Tenant is the name of the group, troublesome when wanting to have the same Tenant name for many different groups and users but giving each one different levels of access.

Add a configuration option to have a defined display name for the Tenant as is displayed in Kibana.

- name: "::Infosec::RW::InfoSecTeam::"
  groups: ["infosec-rw-securityteam"]
  tenant_displayname: "Infosec"
  kibana_access: rw
  kibana_hide_apps: ["readonlyrest_kbn", "timelion"]
  kibana_index: ".kibana_infosec"

- name: "::Infosec::RO::NetworkTeam::"
  groups: ["infosec-ro-network"]
  tenant_displayname: "Infosec"
  kibana_access: ro
  kibana_hide_apps: ["readonlyrest_kbn", "timelion"]
  kibana_index: ".kibana_infosec"

- name: "::Infosec::RO::GlobalAdmin::"
  groups: ["admin"]
  tenant_displayname: "Infosec"
  kibana_access: admin
  kibana_index: ".kibana_infosec"
1 Like
2

We now have a feature in ROR Enterprise Kibana plugin so that you specify a Javascript function to alter the tenancy name.

This could not be implemented as above, because the group name many times comes from LDAP, SAML, or other external authorization service. Therefore, we had to require from the user a transformation function.

This function can of course include a chain of if, or switch/case statement so you can specify a precise alias to a precise tenancy name.

This feature is documented in our official documentation: readonlyrest-docs/kibana.md at master · beshu-tech/readonlyrest-docs · GitHub

If you want our help to create a custom function, we are happy to code it for you.