I'm looking for the correct way to give users anonymous access to a Kibana dashboard, but at the same time preventing them from having access to other Kibana features. I read that the role kibana_dashboard_only_user is now deprecated (I'm on 7.6.2), and that I have to give anonymous users the cluster monitor privilege, so I tried creating a role that has:
- cluster monitor privilege
- read and view-metadata access to the index concerned
- dashbaord read privilege on global spaces
but is doesn't work: I get the following error:
[security_exception] action [indices:data/read/search] is unauthorized for user [anonymous_user]
then I tried adding the read rights on the indices .kibana*. It worked, but all the Kibana features are available, not only the dashboards.
How can I solve this? Thanks.