Back to Beats

Grant privileges and roles needed to read Metricbeat data from {{kib}} [kibana-user-privileges]

docs/reference/metricbeat/kibana-user-privileges.md

9.4.01.1 KB
Original Source

Grant privileges and roles needed to read Metricbeat data from {{kib}} [kibana-user-privileges]

{{kib}} users typically need to view dashboards and visualizations that contain Metricbeat data. These users might also need to create and edit dashboards and visualizations.

To grant users the required privileges:

  1. Create a reader role, called something like metricbeat_reader, that has the following privilege:

    TypePrivilegePurpose
    Indexread on metricbeat-* indicesRead data indexed by Metricbeat
    SpacesRead or All on Dashboards, Visualize, and DiscoverAllow the user to view, edit, and create dashboards, as well as browse data.
    SpacesRead or All on {{kib}} MetricsAllow the use of {{kib}} Metrics
  2. Assign the reader role, along with the following built-in roles, to users who need to read Metricbeat data:

    RolePurpose
    monitoring_userAllow users to monitor the health of Metricbeat itself. Only assign this role to users who manage Metricbeat.