# User can't view APM services in Kibana

**URL:** <https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140>\
**Category:** APM\
**Tags:** ui\
**Created:** [June 15, 2023, 8:59pm UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140 "2023-06-15T20:59:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![qd-danh](https://avatars.discourse-cdn.com/v4/letter/q/43a26b/32.png) [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Post date:** [June 15, 2023, 8:59pm UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140/1 "2023-06-15T20:59:34Z")

</div>

We are new to sending APM data from our services to elastic (using Serilog and .NET libraries). It seems to be working fine. I am admin and can see our sample service listed in APM, Services and then can drill down into dependencies, errors, metrics, all is good.

However, the devs on our team (not admin) get a kind of "welcome" message as if there is no APM data at all. Same instance, same data, just they are "blocked" from seeing the data in the UI.

It **feels like** a permissions or privilege problem, since I know the APM data is there. I'm digging through docs, privileges, and even elastic consulting doesn't know what's missing in our setup.

Any ideas what else to try?

Screenshot below from admin user - CAN see the data.  
Screenshot below from dev user - CAN NOT see the data.

Thank you!

 ![kibana-apm-admin-see-data](https://us1.discourse-cdn.com/elastic/original/3X/0/8/08ccd73e62ca6f7d606672c8f232c50bbf1cbbfe.png)

 ![kibana-apm-dev-no-data](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6a89fe8c32724dd448bc804d0d864b9e91fd7699.png)

---

<div class="post-metadata">

**Author:** ![lwintergerst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lwintergerst/32/18164_2.png) [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Post date:** [June 16, 2023, 6:20am UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140/2 "2023-06-16T06:20:29Z")

</div>

Hello Dan,  
you are right, this likely has to do with some missing privileges for the "dev" user.

If you want me to help you with the troubleshooting, can you login as one of the dev users and then run the following and send me the output?

```auto
GET _security/_authenticate?filter_path=roles

```

We'll likely need to go back and forth a few times. Once I have the output of the above I might need other information from you.

Alternatively you could try to follow this guide here and assign the newly created role to all your dev users:

> **[APM reader user | Kibana Guide \[8.8\] | Elastic](https://www.elastic.co/guide/en/kibana/current/apm-app-reader.html)**

---

<div class="post-metadata">

**Author:** ![qd-danh](https://avatars.discourse-cdn.com/v4/letter/q/43a26b/32.png) [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Post date:** [June 17, 2023, 6:58pm UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140/3 "2023-06-17T18:58:33Z")

</div>

Thank you Luca. Replied to you with direct message.

I will update this thread with any progress we make, to help others that might have this same issue.

---

<div class="post-metadata">

**Author:** ![qd-danh](https://avatars.discourse-cdn.com/v4/letter/q/43a26b/32.png) [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Post date:** [June 20, 2023, 5:57pm UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140/4 "2023-06-20T17:57:34Z")

</div>

Update here after working with Luca...

There are two ways to address this issue.

- In the role, add the `read` and `view_index_metadata` privileges to the following indices:

- add the built-in `viewer` role to the role or user. This is the new way, replacing `apm_user` as suggested in older documentation.

Hope that helps.  
(@lwintergerst feel free to chime in with anything else - thank you for the help)

 ![2023-06-20 10_55_09](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c5e21dc62230b922f58901ec355d9639444241e.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 18, 2023, 5:57pm UTC](https://discuss.elastic.co/t/user-cant-view-apm-services-in-kibana/336140/5 "2023-07-18T17:57:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.