Final Lab: Spaces and roles for two teams

What you will learn in this TP

• Create spaces
• Write roles
• Check the isolation

Introduction #

What you will learn in this section

• Create spaces
• Write roles
• Check the isolation

Context. Two teams share the same Elastic Stack. The web team must see neither the data nor the dashboards of the payments team.

Prerequisites: Lab 3 completed  ·  Estimated time: 40 min

A shared, partitioned Kibana.

Setup #

Guided steps, with their solutions.

1. 1. Create the team indices

   Why? Indices named after each team make pattern-based permissions easier.

   Create two documents, one in logs-app-web, the other in logs-app-paiement.

2. 2. Create the payments space

   Why? Each team has its own space; the web space has existed since Lab 3.

   Create the equipe-paiement space.

3. 3. Write the web team role

   Why? The role combines read access to the web indices and read access to the web space only.

   Create the lecteur_web role, then the alice user.

4. 4. Check the isolation

   Why? The check is done with the restricted account, not with the superuser.

   As alice, read both indices, then list the accessible spaces.

5. 5. Log in to the interface

   Why? The user experience confirms the configuration.

   Log in to Kibana as alice: which spaces and which menus do you see?

Difficulty level : ●●●○○ (3/5)