APM users that publish events to Elasticsearch need privileges to write to APM data streams.
General writer roleedit
To grant an APM user the required privileges for writing events to Elasticsearch:
Create a general writer role, called something like
apm_writer, that has the following privileges:
Type Privilege Purpose
Permits auto-creation of indices and data streams
Write events into Elasticsearch
- Assign the general writer role to users who need to publish APM data.
- If real user monitoring is enabled, create a separate RUM source mapping role.