- 1 minutes to read
FAQ - Required RabbitMQ User Permissions
Question
What permissions are required to monitor RabbitMQ?
Answer
Minimum for monitoring: RabbitMQ user with monitoring tag (read-only access to Management API)—grants permission to view queues, exchanges, nodes, consumers without modify rights.
For remote actions (purge queues): user with management tag.
Permission Levels
| Permission Tag | Access Level | Use Case |
|---|---|---|
| monitoring | Read-only: View queues, exchanges, nodes, consumers, connections | Basic monitoring without remote actions |
| management | Read-write: All monitoring permissions + purge queues, view bindings, check consumer status | Full monitoring with remote queue management |
| administrator | Full control: All management permissions + create/delete vhosts, users, policies | Not recommended for agent (excessive privileges) |
Creating a Monitoring User
# Create user for monitoring
rabbitmqctl add_user nodinite_monitor SecurePassword123
# Grant monitoring tag for read-only access
rabbitmqctl set_user_tags nodinite_monitor monitoring
# Grant permissions on virtual hosts to monitor
rabbitmqctl set_permissions -p / nodinite_monitor ".*" ".*" ".*"
For remote actions (purge queues), use management tag instead:
rabbitmqctl set_user_tags nodinite_monitor management
Next Step
Prerequisites for RabbitMQ Monitoring Agent
Install RabbitMQ Monitoring Agent