Kibana Multi Tenancy

Security
1

Hi guys , lately i was trying to create 2 different tenants with two different users so i can control what dashboard can these users see, my problem is that when i delete dahsboard from the created tenant it deletes the dashboard also from the global tenant. though i’m switching to the specified tenant when i delete the dashboard

this is my kibana.yml config:

elasticsearch.requestHeadersWhitelist: [“securitytenant”,“Authorization”]
opendistro_security.multitenancy.enabled: true
opendistro_security.multitenancy.tenants.enable_global: true
opendistro_security.multitenancy.tenants.enable_private: true
opendistro_security.readonly_mode.roles: [“read_only”]

Any idea what ma i doing wrong ?

2

Hello, my understanding is that if e.g. you create a dashboard in a specified tenant (let’s name it: logs_tenant) this dashboard will not appear on global_tenant, but rather only on logs_tenant. So, actions performed within logs_tenant (e.g. deleting that dashboard) shouldn’t affect global_tenant contents, and vice versa.

Apologies if I got it wrong, but could you confirm your experience has been different?

Try for example to create a dashboard on specified tenant and check if you can then view it on global tenant or not.

3

@HeiDri Hi, Did you have a chance debug this further, as per the above instructions? This seems like a very interesting case if indeed the objects are being duplicated across tenants and deleted simultaneously.

4

Hi @Anthony i found the solution , it was a config problem in config.yml i was setting the multi tenancy index to .kibana* , i changed it to .kibana which worked fine , it was my bad :slight_smile: