Metricbeat features that require authorizationedit

After securing Metricbeat, make sure your users have the roles (or associated privileges) required to use these Metricbeat features. Note that some of the roles shown here are built-in, and some are user-defined.

Feature Role

Send data to a secured cluster

metricbeat_writer [a]

Load index templates

metricbeat_writer [a] and kibana_user

Load Metricbeat dashboards into Kibana

metricbeat_writer [a] and kibana_user

Load machine learning jobs

machine_learning_admin

Read indices created by Metricbeat

metricbeat_reader [a]

View Metricbeat dashboards in Kibana

kibana_user

Store and manage configurations in a central location in Kibana

beats_admin

Load index lifecycle policies and use index lifecycle management

metricbeat_ilm [a]

[a] These roles are user-defined.

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Metricbeat indices. You may want to define additional roles to provide more restrictive access.