[REQUEST]: Fleet UI is only accessible with Fleet:All permissions before 8.18

[nchaulet]

Description

We should update the doc https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html to make more obvious that the Fleet UI is only accessible with Fleet:All and Integration:All and we do not support a readonly mode before 8.18

Resources

Existing doc page
Related SDH https://github.com/elastic/sdh-beats/issues/5709

Collaboration

Please choose a preferred collaboration model.

Point of contact.

@nchaulet

[kilfoyle]

we do not support a readonly mode before 8.18

@nchaulet Sorry, but I'm a bit confused. I'm looking at an 8.17.2 cluster and I see the "Read" permission level for both Fleet and Integrations. So doesn't that mean that Read only mode is available in 8.17?

[lucabelluccini]

We've observed that if you set Read for Fleet & Integrations, you will get an error when accessing Fleet.

To the eyes of the users, it is a bug. There's why it's better to remove it from the docs entirely on 8.17 at this point... Or let's add a warning saying there's a bug and it got fixed in 8.18.

[nchaulet]

@nchaulet Sorry, but I'm a bit confused. I'm looking at an 8.17.2 cluster and I see the "Read" permission level for both Fleet and Integrations. So doesn't that mean that Read only mode is available in 8.17?

Yes the flag exists in the role UI, but it's not supported by the UI, only APIs already support a read only access in 8.17

[kilfoyle]

Thanks for explaining @nchaulet and @lucabelluccini

Here's a PR to revert the 8.17 docs back to how they were, with no mention of the read-only access: #1720

[kilfoyle]

Closed by: #1720