From 6e0957653e16fee64c5e46333715023e0422299d Mon Sep 17 00:00:00 2001
From: Peter Dyson <peter.dyson@geekpete.com>
Date: Wed, 18 Jun 2025 19:12:16 +1000
Subject: [PATCH] Viewer role needs experimental settings for Fleet UI access

Make users aware that for 8.17, viewer role requires Fleet experimental settings enabled for read only access to the Fleet UI
---
 docs/reference/security/authorization/built-in-roles.asciidoc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/reference/security/authorization/built-in-roles.asciidoc b/docs/reference/security/authorization/built-in-roles.asciidoc
index 18a45e3b03663..2055a2a5ec3e6 100644
--- a/docs/reference/security/authorization/built-in-roles.asciidoc
+++ b/docs/reference/security/authorization/built-in-roles.asciidoc
@@ -228,6 +228,7 @@ Grants read-only access to all features in {kib} (including Solutions) and to da
 ===============================
 * This role provides read access to any index that is not prefixed with a dot.
 * This role automatically grants read-only access to new {kib} features as soon as they are available.
+* In version 8.17, access to Fleet UI with this role requires Fleet experimental features to be enabled which are disabled by default. See `xpack.fleet.enableExperimental` in https://www.elastic.co/guide/en/kibana/8.17/fleet-settings-kb.html[Kibana settings documentation,title=Kibana 8.17 settings].
 ===============================
 
 --