# RBAC for APM Metrics

**URL:** <https://discuss.elastic.co/t/rbac-for-apm-metrics/203672>\
**Category:** Kibana\
**Created:** [October 15, 2019, 2:32pm UTC](https://discuss.elastic.co/t/rbac-for-apm-metrics/203672 "2019-10-15T14:32:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rwcanand](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rwcanand/32/47218_2.png) [@rwcanand](https://discuss.elastic.co/u/rwcanand)\
**Post date:** [October 15, 2019, 2:32pm UTC](https://discuss.elastic.co/t/rbac-for-apm-metrics/203672/1 "2019-10-15T14:32:34Z")

</div>

- I currently have an ELK - APM setup in place where multiple teams have configured their agents to send data via APM server to Elasticsearch. They are able to look at the data in Kibana.
- Is it possible to configure Kibana/APM such that I can restrict details of each application to an individual user i.e. RBAC for APM on Kibana.
- Since APM indexes all data inside an 'apm-\*' index, subsequent Index Pattern via Kibana does not provide me any flexibility in separating datasets thereby restricting RBAC policies for each index separately.

# ELK Details

- Elasticsearch: 7.4.0
- Kibana: 7.4.0
- APM Server: 7.4.0
- APM Agents: Java and .Net

---

<div class="post-metadata">

**Author:** ![willemdh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/32/16922_2.png) [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Post date:** [October 15, 2019, 9:02pm UTC](https://discuss.elastic.co/t/rbac-for-apm-metrics/203672/2 "2019-10-15T21:02:28Z")

</div>

Document and field level security is only possible with a Platinum subscription. Do you have a subscription? If so you can create a role that gives access to all documents where field x has value y, etc...

---

<div class="post-metadata">

**Author:** ![rwcanand](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rwcanand/32/47218_2.png) [@rwcanand](https://discuss.elastic.co/u/rwcanand)\
**Post date:** [October 17, 2019, 1:07pm UTC](https://discuss.elastic.co/t/rbac-for-apm-metrics/203672/3 "2019-10-17T13:07:27Z")

</div>

Thanks. This is what I am looking for. Unfortunately I don't have the subscription to test the same. Thanks again for the info.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 14, 2019, 1:07pm UTC](https://discuss.elastic.co/t/rbac-for-apm-metrics/203672/4 "2019-11-14T13:07:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.