This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Grant privileges and roles needed for writing events
editGrant privileges and roles needed for writing events
editAPM users that publish events to Elasticsearch need privileges to write to APM data streams.
To grant an APM user the required privileges for writing events to Elasticsearch:
-
Create a general writer role, called something like
apm_writer
, that has the following privileges:Type Privilege Purpose Index
auto_configure
ontraces-apm*
,logs-apm*
, andmetrics-apm*
indicesPermits auto-creation of indices and data streams
Index
create_doc
ontraces-apm*
,logs-apm*
, andmetrics-apm*
indicesWrite events into Elasticsearch
- Assign the general writer role to users who need to publish APM data.
- If real user monitoring is enabled, create a separate RUM source mapping role.