Monitor roles for the user

Hello,
I have elastisearch exporter for getting cluster metrics to Prometheus, But we have to add a username and Password in the service file, Which roles will be okay for getting cluster details?