# Role in cloud enterprise **URL:** \ **Category:** Elastic Cloud Enterprise (ECE)\ **Created:** [April 11, 2017, 7:30pm UTC](https://discuss.elastic.co/t/role-in-cloud-enterprise/82043 "2017-04-11T19:30:22Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![lowlevelio](https://avatars.discourse-cdn.com/v4/letter/l/ea666f/32.png) [@lowlevelio](https://discuss.elastic.co/u/lowlevelio)\ **Post date:** [April 11, 2017, 7:30pm UTC](https://discuss.elastic.co/t/role-in-cloud-enterprise/82043/1 "2017-04-11T19:30:22Z")
What is the recommended role for metric beat in cloud enterprise? It works as superuser, but I suppose that isn't very great security wise. There's a role called metricbeat\_reader, which I suppose cannot write to elastic. (What is that role actually used for?). Maybe the metricbeat\_reader role is a custom role created after the installation, but anyway I'm interested in the minimum recommended access the Metricbeat agent needs in elastic to be able to write metrics. ---
**Author:** ![joegallo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joegallo/32/14287_2.png) [@joegallo](https://discuss.elastic.co/u/joegallo)\ **Post date:** [April 12, 2017, 6:18pm UTC](https://discuss.elastic.co/t/role-in-cloud-enterprise/82043/2 "2017-04-12T18:18:47Z")
Hello! There's a very good guide on the permissions to use for using Beats with a cluster that's secured by X-Pack [here](https://www.elastic.co/guide/en/x-pack/5.3/beats.html). I don't think there's any special gotchas on that front for a cluster running in Elastic Cloud Enterprise. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 10, 2017, 6:23pm UTC](https://discuss.elastic.co/t/role-in-cloud-enterprise/82043/3 "2017-05-10T18:23:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.