﻿---
title: Grant users access to secured resources
description: You can use role-based access control to grant users access to secured resources. The roles that you set up depend on your organization’s security requirements...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4402/solutions/observability/synthetics/grant-access-to-secured-resources
products:
  - Elastic Cloud Serverless
  - Elastic Observability
---

# Grant users access to secured resources
You can use role-based access control to grant users access to secured resources. The roles that you set up depend on your organization’s security requirements and the minimum privileges required to use specific features.
<tab-set>
  <tab-item title="Elastic Stack">
    Typically you need the create the following separate roles:
    - [Setup role](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4402/solutions/observability/synthetics/setup-role) for enabling Monitor Management.
    - [Writer role](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4402/solutions/observability/synthetics/writer-role)  for creating, modifying, and deleting monitors.
    - [Reader role](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4402/solutions/observability/synthetics/reader-role) for Kibana users who need to view and create visualizations that access Synthetics data.
    Elasticsearch security features provides [built-in roles](https://docs-v3-preview.elastic.dev/elastic/elasticsearch/tree/main/reference/elasticsearch/roles) that grant a subset of the privileges needed by Synthetics users. When possible, assign users the built-in roles to minimize the affect of future changes on your security strategy. If no built-in role is available, you can assign users the privileges needed to accomplish a specific task.In general, these are types of privileges you’ll work with:
    - **Elasticsearch cluster privileges**: Manage the actions a user can perform against your cluster.
    - **Elasticsearch index privileges**: Control access to the data in specific indices your cluster.
    - **Kibana space privileges**: Grant users write or read access to features and apps within Kibana.
  </tab-item>

  <tab-item title="Serverless">
    - **Viewer**:
      - View and create visualizations that access Synthetics data.
    - **Editor**:
      - Create, modify, and delete monitors.
    - View and create visualizations that access Synthetics data.
    - **Admin**:
      - Full access to project management, properties, and security privileges.
    - Create, modify, and delete monitors.
    - View and create visualizations that access Synthetics data.
    Read more about user roles in [Assign user roles and privileges](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4402/deploy-manage/users-roles/cloud-organization/user-roles).
  </tab-item>
</tab-set>