By default, we start Filebeat as the root user to be able to read all the logs generated by all application, but nothing prevents you from editing the startup scripts to make FB run as another user. You need to make sure the users/group have the right privileges to read and stat them.
related post with a few tricks: Filebeat as a non-root user