This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« SLOs Create a service-level objective (SLO) »
Elastic Docs ›Elastic Observability [8.x] ›Incident management ›SLOs

Configure service-level objective (SLO) access

edit

Configure service-level objective (SLO) access

edit

To create and manage SLOs, you need an appropriate license.

You can enable access to SLOs in two different ways:

  • Creating the following roles, depending on the type of access needed:

    • SLO Editor — Create, edit, and manage SLOs and their historical summaries.
    • SLO Viewer — Check SLOs and their historical summaries.

  • Using the editor built-in role. This role grants full access to all features in Kibana (including the Observability solution) and read-only access to data indices. Users assigned to this role can create, edit, and manage SLOs.

    The editor built-in role grants write access to all Kibana apps. If you want to limit access to the SLOs only, you have to manually create and assign the mentioned roles.

To create a role:

  1. From the left navigation in Kibana, under Management select Stack Management.
  2. Under Security, select Roles.
  3. Click Create role in the upper-right corner of the page.
Create an SLO Editor role
edit

Set the following privileges for the SLO Editor role:

  1. Under Index privileges in the Elasticsearch section, add .slo-observability-* to the Indices field and read, view_index_metadata, write, and manage to the Privileges field.
  2. Click Add index privilege.

  3. In the Indices field, add the indices for which you plan to create SLOs. Then, add read and view_index_metadata to the Privileges field. The following example shows logs-*, but you can specify any indices.

    Cluster and index privileges for SLO Editor role
  4. In the Kibana section, click Add Kibana privilege.
  5. From the Spaces dropdown, either select any specific spaces you want the role to apply to, or select All Spaces.

  6. Set Observability → SLOs to All.

    SLO Kibana all privileges
  7. Click Create Role at the bottom of the page and assign the role to the relevant users.
Create an SLO Viewer role
edit

Set the following privileges for the SLO Read role:

  1. Under Index privileges in the Elasticsearch section, add .slo-observability-* to the Indices field and read and view_index_metadata to the Privileges field.

    Index privileges for SLO Viewer role
  2. In the Kibana section, click Add Kibana privilege.
  3. From the Spaces dropdown, either select any specific spaces you want the role to apply to, or select All Spaces.

  4. Set Observability → SLOs to Read.

    SLO Kibana read privileges
  5. Click Create Role at the bottom of the page and assign the role to the relevant users.
« SLOs Create a service-level objective (SLO) »