# Elasticsearch-net Use the least-privileged account

**URL:** <https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227>\
**Category:** Kibana\
**Tags:** elastic-stack-security, language-clients\
**Created:** [May 18, 2021, 1:09am UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227 "2021-05-18T01:09:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [May 18, 2021, 1:09am UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227/1 "2021-05-18T01:09:15Z")

</div>

NEST version: 7.10.0  
elasticsearch version：7.5.1

My elasticsearch has enabled x-pack authentication, how to use the minimum permission configuration，

This is my permission configuration

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/0/b06702f6009e64383844e79810dabbad91278174.png)

I don’t know how to grant users the minimum permissions or the recommended permissions. I found that only administrator permissions can write logs. The permissions shown in the figure cannot be written to logs successfully.

---

<div class="post-metadata">

**Author:** ![Dzmitry](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dzmitry/32/65026_2.png) [@Dzmitry](https://discuss.elastic.co/u/Dzmitry)\
**Post date:** [May 21, 2021, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227/2 "2021-05-21T13:12:26Z")

</div>

Hi @yt_h ,

Could you clarify about stack version: is it 7.10 or 7.5.1? It is important to keep version consistency across Elastic products.

In order to add roles/users you should have a permission for it.

You can read about Kibana role-based access in [docs](https://www.elastic.co/guide/en/elasticsearch/reference/7.10/authorization.html)

Regards, Dzmitry

---

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [May 24, 2021, 12:36am UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227/3 "2021-05-24T00:36:44Z")

</div>

Hi @Dzmitry  
elasticsearch version: 7.5.1  
How to assign the lowest role permissions to the Elasticsearch-net program

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [May 24, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227/4 "2021-05-24T06:06:53Z")

</div>

That depends on what your program does.

The Elasticsearch privilege model differentiates between different operations (e.g. searching, ingesting data, cluster management). There is no "lowest role permissions" that apply to all programs because different applications will need to do different things.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 21, 2021, 6:07am UTC](https://discuss.elastic.co/t/elasticsearch-net-use-the-least-privileged-account/273227/5 "2021-06-21T06:07:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.