libvirt users - Oct 2021 - how/where to configure access to libvirt-sock-ro

I wanted to create a monitoring user that can do some reporting like this:

runuser -u xxxxx  -- prometheus-libvirt-exporter -libvirt.uri
/var/run/libvirt/libvirt-sock-ro

But I am getting the 
failed to connect: authentication required