How to use manage_own_api_key privilege in elk

Is it possible to have a user which has just read only privilege to Kibana dashboard and can also create its api key?

Giving read only privilege to user does not allow user to create api key from kibana console. I read here that

You must have the manage_security, manage_api_key, or the manage_own_api_key cluster privileges to use API keys in Kibana.

It looks like manage_own_api_key will work here but I am not sure how to use it. User should be assigned what minimal roles and privileges so that it can create api key and have read only privilege for rest of the features.

I am new to ELK, any idea how can this be achieved?

Thanks in advance :slight_smile: