# Any way to hide plugins from users who don't have permissions?

**URL:** <https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710>\
**Category:** Security\
**Created:** [April 22, 2021, 10:17am UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710 "2021-04-22T10:17:58Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jong](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@jong](https://forum.opensearch.org/u/jong)\
**Post date:** [April 22, 2021, 10:17am UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/1 "2021-04-22T10:17:58Z")

</div>

For simplicity for end users, I want to hide plugins that the user has no permissions for.

The Security plugin does not show up in the nav bar for users without permission. Is it possible to hide other plugins from users without permissions?

For example, I’ve installed the Alerting plugin and it shows up here for a user with no permissions:  
 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/d/d94b53b55b176e5a949fd62796e58aff93442a55.png)

I want it to show:  
 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/0/04c72f3e4d95e5881ad1ce5a401d3e325a921219.png)

Thanks!

---

<div class="post-metadata">

**Author:** ![jong](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@jong](https://forum.opensearch.org/u/jong)\
**Post date:** [April 22, 2021, 10:34am UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/2 "2021-04-22T10:34:40Z")

</div>

I found this old thread, but not really helpful.

> [@How to hide Kibana menu for user?](https://forum.opensearch.org/t/how-to-hide-kibana-menu-for-user/861):
>
> How to hide Kibana menu for users? For example: I want hide Discover Alerting and Security.

How specifically does Kibana/OpenSearch decide whether or not to display the “Security” plugin in the nav bar? Is it possible to extend to functionality to other plugins? If anyone has any pointers I could look into maybe making changes and a pull request.

---

<div class="post-metadata">

**Author:** ![searchymcsearchface](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/searchymcsearchface/32/868_2.png) [@searchymcsearchface](https://forum.opensearch.org/u/searchymcsearchface)\
**Post date:** [April 22, 2021, 1:24pm UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/3 "2021-04-22T13:24:27Z")

</div>

Moved to Security category.

---

<div class="post-metadata">

**Author:** ![jong](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@jong](https://forum.opensearch.org/u/jong)\
**Post date:** [April 22, 2021, 2:17pm UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/4 "2021-04-22T14:17:22Z")

</div>

Looks like this menu item is not displayed because of this line here:

> <https://github.com/opensearch-project/security-dashboards-plugin/blob/5e1598e1f5455817ee70a53b721c4be3807b7a35/public/plugin.ts#L80>

---

<div class="post-metadata">

**Author:** ![shansb](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@shansb](https://forum.opensearch.org/u/shansb)\
**Post date:** [November 11, 2021, 1:18pm UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/5 "2021-11-11T13:18:00Z")

</div>

Hi, is there an update on this issue?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [November 11, 2021, 1:58pm UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/6 "2021-11-11T13:58:33Z")

</div>

@shansb I don’t think there will be any for OpenDistro.  
I suggest to open feature request for OpenSearch Dashboards.

[https://github.com/opensearch-project/OpenSearch-Dashboards/issues](https://github.com/opensearch-project/OpenSearch-Dashboards/issues)

Currently the only mechanism to hide OpenSearch Dashboards menu elements based on user’s priviliges is `opensearch_security.readonly_mode.roles` option.

> **[Users and roles](https://opensearch.org/docs/latest/security-plugin/access-control/users-roles/)**
>
> Users and roles

However, this option won’t allow you to choose elements of the OpenSearch Dashboards menu and will disable everything except Dashboards.

![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/e/e5b36f763b3df3b7b89575b2401495ef1f5bbcf7.png)

---

<div class="post-metadata">

**Author:** ![shansb](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@shansb](https://forum.opensearch.org/u/shansb)\
**Post date:** [November 11, 2021, 2:12pm UTC](https://forum.opensearch.org/t/any-way-to-hide-plugins-from-users-who-dont-have-permissions/5710/7 "2021-11-11T14:12:53Z")

</div>

Ok thanks for your quick reply.  
I opened a feature request here: [https://github.com/opensearch-project/OpenSearch-Dashboards/issues/929](https://github.com/opensearch-project/OpenSearch-Dashboards/issues/929)