# X-Pack Security: no pw for beats\_system?

**URL:** <https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [May 22, 2019, 2:55pm UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259 "2019-05-22T14:55:02Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![MarcusCaepio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcuscaepio/32/32458_2.png) [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\
**Post date:** [May 22, 2019, 2:55pm UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/1 "2019-05-22T14:55:02Z")

</div>

Hi all,  
thanks for making X-Pack Security free with 7.1.  
I am trying to set it up right now.  
I don't want to need a password for the monitoirng beats data, so how can I disable the need for a password for the beats\_system user ?

Regards,  
Marcus

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [May 23, 2019, 3:12am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/2 "2019-05-23T03:12:57Z")

</div>

It is not possible to have a user without a password.

What exactly are you trying to achieve here?

---

<div class="post-metadata">

**Author:** ![MarcusCaepio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcuscaepio/32/32458_2.png) [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\
**Post date:** [May 23, 2019, 6:35am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/3 "2019-05-23T06:35:05Z")

</div>

Basically I am trying to archive to not needing a password for the beats.  
But when this is not possible, let me ask my question in other words:  
Which priviliges do I have to give a role named "beats", where the beats are only allowed to write into elasticsearch (with templates, monitoring and everything else, what beats do) but no read rights?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [May 24, 2019, 2:21am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/4 "2019-05-24T02:21:11Z")

</div>

Let's back up a moment.

_Why_ do you want to not have a password for this? I can probably help you solve you problem, but _I want to turn on security but then have a user that doesn't need to authenticate_ doesn't make much sense to me.

If you can explain your reasoning for this, I might be able to get you the answer you need.

---

<div class="post-metadata">

**Author:** ![MarcusCaepio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcuscaepio/32/32458_2.png) [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\
**Post date:** [May 28, 2019, 5:38am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/5 "2019-05-28T05:38:39Z")

</div>

I thought it would be able to let a "beat" just push into elastic, so I don't have to edit all configs of my beats in the whole network. But as it is necessary, I only want the beats to be able to write into elastic and let them import dashboards, but no read rights.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 25, 2019, 5:38am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259/6 "2019-06-25T05:38:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
