APM Server features that require authorization

After securing APM Server, make sure your users have the roles (or associated privileges) required to use these APM Server features. Note that some of the roles shown here are built-in, and some are user-defined.

FeatureRole

Send data to a secured cluster

apm_writer [a]

Load index templates

apm_writer [a] and kibana_user

Read indices created by APM Server

apm_user

View APM Server dashboards in Kibana

kibana_user

[a] These roles are user-defined.

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to APM Server indices. You may want to define additional roles to provide more restrictive access.