forked from docs/doc-exports
Zheng, Xiu
5b5876528a
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: Zheng, Xiu <zhengxiu@huawei.com> Co-committed-by: Zheng, Xiu <zhengxiu@huawei.com>
38 lines
7.3 KiB
HTML
38 lines
7.3 KiB
HTML
<a name="css_01_0109"></a><a name="css_01_0109"></a>
|
|
|
|
<h1 class="topictitle1">Creating a User and Granting Permissions by Using Kibana</h1>
|
|
<div id="body0000001334619321"><div class="section" id="css_01_0109__section27211243194416"><h4 class="sectiontitle">Prerequisites</h4><p id="css_01_0109__p7463739987">The security mode has been enabled for the cluster.</p>
|
|
</div>
|
|
<div class="section" id="css_01_0109__section12163507442"><h4 class="sectiontitle">Procedure</h4><div class="note" id="css_01_0109__note11864519122717"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_01_0109__p2042932512322">This section takes Kibana 7.6.2 as an example to describe the procedure.</p>
|
|
</div></div>
|
|
<ol id="css_01_0109__ol13831428473"><li id="css_01_0109__li483113274712">Log in to the CSS management console.</li><li id="css_01_0109__li201191431164715">Click <strong id="css_01_0109__b174921177179">Access Kibana</strong> in the <strong id="css_01_0109__b18835161461719">Operation</strong> column of a cluster.<div class="fignone" id="css_01_0109__fig1591311517013"><span class="figcap"><b>Figure 1 </b>Logging in to Kibana (1)</span><br><span><img id="css_01_0109__image88061840202" src="en-us_image_0000001474725864.png"></span></div>
|
|
</li><li id="css_01_0109__li1390318464482">Log in to Kibana.<div class="fignone" id="css_01_0109__fig921015524911"><span class="figcap"><b>Figure 2 </b>Logging in to Kibana (2)</span><br><span><img id="css_01_0109__image32151031135017" src="en-us_image_0000001525365849.png"></span></div>
|
|
<div class="p" id="css_01_0109__p72171755134917"><ul id="css_01_0109__ul16115366518"><li id="css_01_0109__li61163625113">Username: <strong id="css_01_0109__en-us_topic_0108417047_b84235270617014_1">admin</strong></li><li id="css_01_0109__li141117361515"><strong id="css_01_0109__b18347195820180">Password</strong>: Enter the password set during cluster creation.</li></ul>
|
|
</div>
|
|
</li><li id="css_01_0109__li19408194265113">Click the <span class="uicontrol" id="css_01_0109__uicontrol516381513180"><b>Security</b></span> icon on the Kibana operation page.<div class="fignone" id="css_01_0109__fig1523553195019"><span class="figcap"><b>Figure 3 </b>Going to the Security page</span><br><span><img id="css_01_0109__image19226155695816" src="en-us_image_0000001474406052.png"></span></div>
|
|
</li><li id="css_01_0109__li1402081945">Create a user.<ol type="a" id="css_01_0109__ol79872015420"><li id="css_01_0109__li1525633919011">Choose <span class="uicontrol" id="css_01_0109__uicontrol487317128112"><b>Authentication Backends</b></span> ><span class="uicontrol" id="css_01_0109__uicontrol894610151018"><b>Internal Users Database</b></span>.<div class="fignone" id="css_01_0109__fig7556653115014"><span class="figcap"><b>Figure 4 </b>Adding a user (1)</span><br><span><img id="css_01_0109__image127854321549" src="en-us_image_0000001525365845.png"></span></div>
|
|
</li><li id="css_01_0109__li932013304416">On the <strong id="css_01_0109__b2494612152112">Internal Users Database</strong> page, choose <span><img id="css_01_0109__image1829195432614" src="en-us_image_0000001474566028.png"></span>. The page for adding user information is displayed.<div class="fignone" id="css_01_0109__fig566616365112"><span class="figcap"><b>Figure 5 </b>Adding a user (2)</span><br><span><img id="css_01_0109__image75850121657" src="en-us_image_0000001474406056.png"></span></div>
|
|
</li><li id="css_01_0109__li98518431168">On the user creation page, configure <strong id="css_01_0109__b185672012182216">Username</strong> and <strong id="css_01_0109__b893571317221">Password</strong>, and click <strong id="css_01_0109__b12627131510226">Submit</strong>.<p id="css_01_0109__p119611315206">The user will be displayed in the user list.</p>
|
|
</li></ol>
|
|
</li><li id="css_01_0109__li792019310012">Configure roles and permissions for the user.<ol type="a" id="css_01_0109__ol4219544995"><li id="css_01_0109__li17373173916916">Click <strong id="css_01_0109__b1934411117233">Roles</strong>.<div class="fignone" id="css_01_0109__fig652304645115"><span class="figcap"><b>Figure 6 </b>Adding a role</span><br><span><img id="css_01_0109__image622325681714" src="en-us_image_0000001524766313.png"></span></div>
|
|
</li><li id="css_01_0109__li2102145414179">On the <strong id="css_01_0109__b17736499238">Open Distro Security Roles</strong> page, click <span><img id="css_01_0109__image1848451232711" src="en-us_image_0000001474566028.png"></span>.<ol class="substepthirdol" id="css_01_0109__ol4402357265"><li id="css_01_0109__li12578173113267">Enter a role name on the <strong id="css_01_0109__b8606152262419">Overview</strong> page.<div class="fignone" id="css_01_0109__fig126181617527"><span class="figcap"><b>Figure 7 </b>Entering a role name</span><br><span><img id="css_01_0109__image17606343162717" src="en-us_image_0000001524766321.png"></span></div>
|
|
</li><li id="css_01_0109__li9544154162720">Configure CSS cluster permissions on the <strong id="css_01_0109__b090484472415">Cluster Permissions</strong> page. You can skip this step.</li><li id="css_01_0109__li1334947203119">Configure index permissions on the <strong id="css_01_0109__b1028010258255">Index Permissions</strong> page.<div class="p" id="css_01_0109__p3343474313"><strong id="css_01_0109__b68781410271">Index patterns</strong>: Set this parameter to the name of the index whose permission needs to be configured. For example, <strong id="css_01_0109__b1083813317271">my_store</strong>.<div class="note" id="css_01_0109__note114066412109"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_01_0109__p174073412100">Use different names for the index and the user.</p>
|
|
</div></div>
|
|
</div>
|
|
<p id="css_01_0109__p854571394514">Configure <strong id="css_01_0109__b1134411514289">Permissions: Action Groups</strong> as required, for example, select the read-only permission <strong id="css_01_0109__b695115176289">Search</strong>.</p>
|
|
</li><li id="css_01_0109__li52028582413">Retain the default settings on the <strong id="css_01_0109__b575817367288">Tenant Permissions</strong> page.<p id="css_01_0109__p4217105281512">After the configuration is complete, the role will be displayed.</p>
|
|
</li></ol>
|
|
</li></ol>
|
|
</li><li id="css_01_0109__li113356691613">Assign a role to the user.<ol type="a" id="css_01_0109__ol1997112961612"><li id="css_01_0109__li18729627101619">Click <strong id="css_01_0109__b52401941182914">Role Mappings</strong>.<div class="fignone" id="css_01_0109__fig16883226185320"><span class="figcap"><b>Figure 8 </b>Role mapping</span><br><span><img id="css_01_0109__image142327489358" src="en-us_image_0000001474246400.png"></span></div>
|
|
</li><li id="css_01_0109__li126721159153513">Click <span><img id="css_01_0109__image1840193116275" src="en-us_image_0000001474566028.png"></span> to add the mapping between users and roles.<div class="fignone" id="css_01_0109__fig16582134110537"><span class="figcap"><b>Figure 9 </b>Users and roles</span><br><span><img id="css_01_0109__image179851630133" src="en-us_image_0000001474725872.png"></span></div>
|
|
</li><li id="css_01_0109__li9487184185112">Click <strong id="css_01_0109__b3117122311316">Submit</strong>.</li></ol>
|
|
</li><li id="css_01_0109__li38991045175">Verify that the configuration takes effect in Kibana.</li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0107.html">Working with Kibana</a></div>
|
|
</div>
|
|
</div>
|
|
|