# What are the minimal privileges needed for an enrollment user **URL:** \ **Category:** Beats\ **Tags:** elastic-stack-security, fleet\ **Created:** [January 29, 2019, 11:00am UTC](https://discuss.elastic.co/t/what-are-the-minimal-privileges-needed-for-an-enrollment-user/166144 "2019-01-29T11:00:27Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![kaem2111](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kaem2111/32/24961_2.png) [@kaem2111](https://discuss.elastic.co/u/kaem2111)\ **Post date:** [January 29, 2019, 11:00am UTC](https://discuss.elastic.co/t/what-are-the-minimal-privileges-needed-for-an-enrollment-user/166144/1 "2019-01-29T11:00:27Z")
I am using Version 6.5, platinum license When using user, password for enrollment as described in [https://www.elastic.co/guide/en/beats/metricbeat/current/enroll-beats.html](https://www.elastic.co/guide/en/beats/metricbeat/current/enroll-beats.html) what are the minimal security role/privileges/fields the user needs to succeed the enrollment. For security reasons I do not want to expose an user with beats\_admin rights e.g. on an edge server within a DMZ. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 29, 2019, 11:04am UTC](https://discuss.elastic.co/t/what-are-the-minimal-privileges-needed-for-an-enrollment-user/166144/2 "2019-01-29T11:04:09Z")
If you have a Platinum license you can also raise a support request and someone will be happy to help 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 6:52am UTC](https://discuss.elastic.co/t/what-are-the-minimal-privileges-needed-for-an-enrollment-user/166144/3 "2022-11-04T06:52:55Z")