# Setup vs writer role for Filebeat
**URL:** https://discuss.elastic.co/t/setup-vs-writer-role-for-filebeat/233923
**Category:** Beats
**Tags:** filebeat
**Created:** [May 22, 2020, 3:22pm UTC](https://discuss.elastic.co/t/setup-vs-writer-role-for-filebeat/233923 "2020-05-22T15:22:06Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)
#### Post date: [May 22, 2020, 3:22pm UTC](https://discuss.elastic.co/t/setup-vs-writer-role-for-filebeat/233923/1 "2020-05-22T15:22:06Z")
Hi,
from the documentation I see a sort of role seperation between setting up filebeat and shipping data using filebeat: [https://www.elastic.co/guide/en/beats/filebeat/master/feature-roles.html](https://www.elastic.co/guide/en/beats/filebeat/master/feature-roles.html) (setup role and writer role).
But in my filebeat.yml i can provide **only one user** , which is used to push the logs into elastic cluster, like so:
```
filebeat:
# List of inputs.
inputs:
[{"paths": ["/path/logs/*.log"], "type": "log"}]
# Configure what outputs to use when sending the data collected by the beat.
# Multiple outputs may be used.
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["https://elastic01.com:9200", "https://elastic02.com:9200", "https://elastic03.com:9200"]
username: "filebeat_write_user"
password: "${FILEBEAT_WRITE_USER}"
ssl.certificate_authorities: ["/cert/path/ca.crt"]
```
The user I use there has the **writer role**
When I now start filebeat it leads to errors:
`[indices:admin/template/put] is unauthorized for user [filebeat_write_user]"},"status":403}.`
What is meant by "setup role" how I can "setup" all the templaes without starting filebeat and shipping logs?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 19, 2020, 3:22pm UTC](https://discuss.elastic.co/t/setup-vs-writer-role-for-filebeat/233923/2 "2020-06-19T15:22:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.