Skip to content

Conversation

@geekpete
Copy link
Contributor

Make users aware that for 8.17, viewer role requires Fleet experimental settings enabled for read only access to the Fleet UI.
Used a hard link to Kibana 8.17 docs.
This mention isn't required for 8.18 as the Fleet experimental setting is enabled by default.
I wasn't able to locate the setting in 9.x docs, so may not be relevant to that version.

Make users aware that for 8.17, viewer role requires Fleet experimental settings enabled for read only access to the Fleet UI
@geekpete geekpete added >docs General docs changes Team:Docs Meta label for docs team documentation labels Jun 18, 2025
@github-actions
Copy link
Contributor

Documentation preview:

@elasticsearchmachine
Copy link
Collaborator

@geekpete please enable the option "Allow edits and access to secrets by maintainers" on your PR. For more information, see the documentation.

@elasticsearchmachine elasticsearchmachine added v8.17.8 external-contributor Pull request authored by a developer outside the Elasticsearch team labels Jun 18, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-docs (Team:Docs)

Copy link
Contributor

@shainaraskas shainaraskas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks, @geekpete! I left a quick question on here based on my read of the setting

I wasn't able to locate the setting in 9.x docs, so may not be relevant to that version.

both of these pages / settings are available in the new docs:

https://www.elastic.co/docs/reference/kibana/configuration-reference/fleet-settings#_preconfiguration_settings_for_advanced_use_cases
https://www.elastic.co/docs/deploy-manage/users-roles/cluster-or-deployment-auth/built-in-roles

I assume that if experimental features (or this experimental feature) are enabled by default in 8.18, the same would go for 9.0+.

@geekpete
Copy link
Contributor Author

geekpete commented Jul 8, 2025

I had also confirmed with the Kibana team that per the 8.17 docs mention, the read-only Fleet access is unsupported and only becomes supported in 8.18 and later where it's on by default.

If we're showing users how to enable this in 8.17 then we should probably also explicitly warn them that doing so is unsupported and also generally that experimental features should not be enabled in production environments.

We also have an updated KB article to explain why read-only Fleet access might show errors in 8.17 due to not being enabled, and also warn and explain the different behaviour in the versions and directs users to upgrade to a version where the functionality is enabled by default and supported.
https://support.elastic.co/knowledge/6225856d

Since enabling the experimental feature is both unsupported and not recommended in production, I'm leaning more towards just closing this PR since the newer versions avoid the issue by having the functionality on by default.

@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/core-docs (Team:Docs)

@geekpete geekpete closed this Oct 20, 2025
@geekpete
Copy link
Contributor Author

geekpete commented Oct 20, 2025

Closing since this all became on by default in newer versions and in the previous versions it wasn't supported, just possible. We also have the public knowledge article to explain for anyone hitting the issue https://support.elastic.co/knowledge/6225856d.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

>docs General docs changes documentation external-contributor Pull request authored by a developer outside the Elasticsearch team Team:Docs Meta label for docs team v8.17.11

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants