# User for filebeat
**URL:** https://discuss.elastic.co/t/user-for-filebeat/346361
**Category:** Beats
**Tags:** elastic-stack-monitoring, elastic-stack-security, filebeat
**Created:** [November 3, 2023, 11:38am UTC](https://discuss.elastic.co/t/user-for-filebeat/346361 "2023-11-03T11:38:41Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@hta](https://discuss.elastic.co/u/hta)
#### Post date: [November 3, 2023, 11:38am UTC](https://discuss.elastic.co/t/user-for-filebeat/346361/1 "2023-11-03T11:38:41Z")
How can I create a user for filebeat via the console? The user would of course have to be able to send logs over. I get the following message in the logs: "this action is granted by the cluster privileges [monitor, manage, all]. But I can't find these roles...
Can someone please give me a command with which I can create the used user?
I use bin/elasticsearch-users
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 1, 2023, 1:39pm UTC](https://discuss.elastic.co/t/user-for-filebeat/346361/2 "2023-12-01T13:39:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.