[ROR v1.31.0+] Accessing basic kibana management as a user with hidden "Management" kibana app

Announcements
1

Users with a hidden “Management|Stack Management” ( kibana_hide_apps: [ "Management" ] )
)app still need to access to CSV reports, index patterns and saved objects in order for their Kibana experience to be complete.

The new ReadonlyREST plugin (version 1.31.0 and greater) augments the Kibana UX for users with the aforementioned limitation introducing a “Kibana management” menu.

image

Once inside the kibana management menu

And once the user clicks in one of those links, all other management sub menu items will be hidden as well.

image
image808×598 39.7 KB

Security

Server side navigation prevention is enforced, so adding to favourite sensitive kibana management pages won’t work. The user will be in fact redirected to Kibana main page “/app/home”.

2

Hi Simone,

Still, i need to hide all sub menus for some users. Is there any way to achieve it server side ?

3

Have you tried to add to the hidden apps “ROR Manage Kibana”?

4

Tried that, but no luck :frowning:

5

Wait can you define “all submenus”? You mean from the ROR menu (top right click, the two “Kibana management” and “select tenancy” should not be visible?

How does the ACL block look like for this user?

6

Sorry for not being clear.

By all sub menus i mean, anything under Management : Reporting, Index Patterns, Saved Objects. These are the one i want gone.

Menu looks exactly like the screenshot in your first post.

7

Hi @sbdlt,
Could you confirm that you use the ROR plugin 1.36.0 version or higher? Because the ability to hide manage kibana menu by defining ROR Manage Kibana in a kibana_hide_apps block, were introduced in this version.

8

Yes, i am using plugin version 1.38.0

9

I may have done a mistake somewhere, because “ROR Manage Kibana” is working as expected now.

Thank you.

2 Likes
10

Hi,
I would like my users to access reporting. But not index patterns or saved objects.
Is this possible?