APM reader user

Full APM reader

APM reader users typically need to view the APM app, dashboards, and visualizations that contain APM data. These users might also need to create and edit dashboards, visualizations, and machine learning jobs.

  1. Assign the following built-in roles:

    Role Purpose

    kibana_admin

    Grants access to all features in Kibana.

    apm_user

    Grants the privileges required for APM users on apm* indices

    machine_learning_admin

    Grants the privileges required to create, update, and view machine learning jobs

Partial APM reader

In some instances, you may wish to restrict certain Kibana apps that a user has access to.

  1. Assign the following built in roles:

    Role Purpose

    apm_user

    Grants the privileges required for APM users on apm* indices

  2. Assign space privileges to any Kibana space that the user needs access to. Here are two examples:

    Type Privilege Purpose

    Spaces

    Read or All on the APM app

    Allow the use of the the APM app

    Spaces

    Read or All on Dashboards, Visualize, and Discover

    Allow the user to view, edit, and create dashboards, as well as browse data.

  3. Finally, assign the following role if a user needs to enable and edit machine learning features:

    Role Purpose

    machine_learning_admin

    Grants the privileges required to create, update, and view machine learning jobs