# X-Pack watcher permissions

**URL:** <https://discuss.elastic.co/t/x-pack-watcher-permissions/199234>\
**Category:** Elasticsearch\
**Created:** [September 12, 2019, 10:48am UTC](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234 "2019-09-12T10:48:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bhaniel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhaniel/32/54069_2.png) [@bhaniel](https://discuss.elastic.co/u/bhaniel)\
**Post date:** [September 12, 2019, 10:48am UTC](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234/1 "2019-09-12T10:48:10Z")

</div>

Hello,  
I wanted to understand how the watcher permissions is working .

for example i am a user with permission to index x but i don't have a permission to index y .

currently i have permission watcher/admin ,  
does this mean i can write a watcher for index y ?

if yes it look like a by pass because i can send results to my email by this watcher .

Thanks

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [September 12, 2019, 1:39pm UTC](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234/2 "2019-09-12T13:39:11Z")

</div>

> [@bhaniel](#):
>
> currently i have permission watcher/admin ,

By that you mean you have a role that gives you `manage_watcher` privilege ?

If you create the watch, the watch will run with your user privileges, so it will only be able read index x.

Hope this clarifies things for you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 10, 2019, 1:39pm UTC](https://discuss.elastic.co/t/x-pack-watcher-permissions/199234/3 "2019-10-10T13:39:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
