This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Applications UI annotation user Applications UI central config user »
Elastic Docs ›Elastic Observability [8.16] ›Application and service monitoring ›Application performance monitoring (APM) ›Use APM securely ›Secure access to the Applications UI

Applications UI API user

edit
Applications UI API user
edit
Central configuration APIedit

Users can list, search, create, update, and delete central configurations via the Applications UI API.

  1. Assign the following Kibana feature privileges:

    Type Privilege Purpose

    Kibana

    all on the APM and User Experience feature

    Allow all access to the Applications and User Experience UIs
Central configuration API readeredit

Sometimes a user only needs to list and search central configurations via the Applications UI API.

  1. Assign the following Kibana feature privileges:

    Type Privilege Purpose

    Kibana

    read on the APM and User Experience feature

    Allow read access to the Applications and User Experience UIs
Annotation APIedit

Users can use the annotation API to create annotations on their APM data.

  1. Create a new role, named something like annotation_role, and assign the following privileges:

    Type Privilege Purpose

    Index

    manage on observability-annotations index

    Check if the observability-annotations index exists

    Index

    read on observability-annotations index

    Read the observability-annotations index

    Index

    create_index on observability-annotations index

    Create the observability-annotations index

    Index

    create_doc on observability-annotations index

    Create new annotations in the observability-annotations index

  2. Assign the annotation_role created previously, and the following Kibana feature privileges to any annotation API users:

    Type Privilege Purpose

    Kibana

    all on the APM and User Experience feature

    Allow all access to the Applications and User Experience UIs
« Applications UI annotation user Applications UI central config user »