# What are the minimum privileges a user should be granted to connect to Elasticsearch via a sniffing connection pool with basic authentication?

**URL:** <https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705>\
**Category:** Elasticsearch\
**Created:** [December 12, 2019, 5:49pm UTC](https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705 "2019-12-12T17:49:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![duncRed](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/32.png) [@duncRed](https://discuss.elastic.co/u/duncRed)\
**Post date:** [December 12, 2019, 5:49pm UTC](https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705/1 "2019-12-12T17:49:25Z")

</div>

Hi

We have created a sniffing connection pool to connect to the Elasticsearch cluster. Basic authentication is enabled so Elasticsearch user account details are included in the request. To provide the user with sufficient privileges we are adding the cluster privilege "monitor" to the user role. Is there any way we can restrict this further to only those privileges the user would need to connect to the connection pool? What are the minimum set of privileges that the user would need for this?

If you need any further information please let me know.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 9, 2020, 5:49pm UTC](https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705/2 "2020-01-09T17:49:26Z")

</div>

Closed on January 9, 2020, 5:49pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.