A certain tenant in a query string

s.samoilenko · April 1, 2019, 9:39am

Hi

I would like to share a dashboard with people who has a tenant with the ‘CountryList’ name.
My steps

Open kibana
select the ‘CountryList’ tenant
create and save a new dashboard
Click ‘share’ → Embed code → saved object

I get a link

	<iframe src="http://127.0.0.1:5601/app/kibana#/dashboard/2f06a5c0-545c-11e9-8374-871809c045eb?embed=true&_g=()" 
	height="600" 
	width="800"></iframe>

Another user(who has the CountryList tenant) try to open my link and he can’t see my dashboard while he doesn’t switch his tenant to CountryList.

My question

Can I add a query parameter to a link to change a tenant for the shared dashboard
something like this

	<iframe src="http://127.0.0.1:5601/app/kibana?tenant=CountryList#/dashboard/2f06a5c0-545c-11e9-8374-871809c045eb?embed=true&_g=()" 
	height="600" 
	width="800"></iframe>

Something similar I’ve found here Kibana Multitenancy | Security for Elasticsearch | Search Guard (a sgtenant query parameter)

s.samoilenko · April 9, 2019, 9:34am

Hi

I’ve tried to look at the code of Kibana but found nothing.

Guys any thoughts?

elifish · April 10, 2019, 2:49pm

@s.samoilenko sorry for the slow response on this one. Try setting the query parameter ?security_tenant=CountryList in the iframe source.

The Kibana tenant code where it checks for a security_tenant query param is here: security-kibana-plugin/headers.js at master · opendistro-for-elasticsearch/security-kibana-plugin · GitHub

Cheers,
Eli

s.samoilenko · April 11, 2019, 11:53am

@elifish thank you, it helped

The right line is 67

github.com

opendistro-for-elasticsearch/security-kibana-plugin/blob/master/lib/multitenancy/headers.js#L67


      
          // check for tenant information in HTTP header. E.g. when using the saved objects API
          if(request.headers.securitytenant || request.headers.security_tenant) {
              selectedTenant = request.headers.securitytenant? request.headers.securitytenant : request.headers.security_tenant;
          
          
    if (debugEnabled) {
                  request.log(['info', 'security', 'tenant_http_header'], selectedTenant);
              }
          
          
}
          
          
// check for tenant information in GET parameter. E.g. when using a share link. Overwrites the HTTP header.
          if (request.query && (request.query.security_tenant || request.query.securitytenant)) {
              selectedTenant = request.query.security_tenant? request.query.security_tenant : request.query.securitytenant;
          
          
    if (debugEnabled) {
                  request.log(['info', 'security', 'tenant_url_param'], selectedTenant);
              }
          
          
}
          
          
// skip unauthenticated paths which contains /api/status by default

Topic		Replies	Views
Missing security_tenant parameter in dashboard url when sharing or embedding in latest version Open Source Elasticsearch and Kibana	2	939	February 11, 2021
Embedding a tenant specific dashboard in a web page with JWT auth Security	1	1469	November 13, 2020
Kibana Multi Tenancy Security	3	601	February 3, 2021
Multitenancy - even with separated roles and tenants everything saved ends up in global Security	9	786	October 8, 2021
How to select default tenant as “GLOBAL” in Kibana Dashboard Open Source Elasticsearch and Kibana	1	3443	February 26, 2021

A certain tenant in a query string

Related Topics