[Synthetics] Notify user on insufficient API Key permissions

andrewvc commented 7 months ago

It is currently possible for an administrator to delete the API key used by the synthetics service or reduce the permissions associated with it. This causes the synthetics service to not correctly write data back to Elasticsearch or be unable to read the previous state in the case where read permission is removed.

Actions:

[ ] Prompt the user to fix permissions (can we just have them press a button, or auto-fix them if they're an admin?). This needs further refinement and design
[ ] Send data about broken permissions to the synthetics service so it can be more easily tracked

elasticmachine commented 7 months ago

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)

justinkambic commented 7 months ago

WRT the auto-fix feature, for an admin this should be possible. Otherwise we appeal to the user to contact the admin.

++ that we let the service know perms are broken as well. This enables more proactive response.

elasticmachine commented 2 weeks ago

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

shahzad31 commented 2 weeks ago

i think this is already being done, we auto fix the API is it's deleted for an admin and also telemetry is being sent as well for users missing API keys, so i am going to close this.

elastic / kibana

[Synthetics] Notify user on insufficient API Key permissions #173702