Enable PDF reporting with dashboard read only feature control

[nreese]

There is currently no way to have a dashboard read only role that also has reporting capabilities.

kibana_dashboard_only_user role does not provide PDF reporting sharing options even if the user also the roles kibana_user and reporting_user.

A custom role with Kibana privileges restricting dashboard to read only does not work either. Reporting requires kibana_user role which provides access to all features.

When you assign a user multiple roles, the user receives a union of the roles’ privileges. Therefore, assigning the kibana_user role in addition to a custom role that grants Kibana privileges is ineffective because kibana_user has access to all the features in all spaces. https://www.elastic.co/guide/en/kibana/current/xpack-security-authorization.html

[elasticmachine]

Pinging @elastic/kibana-stack-services

[elasticmachine]

Pinging @elastic/kibana-reporting-services (Team:Reporting Services)

[ivssh]

+1 for this.
Any updates on if this will be supported?

[elasticmachine]

Pinging @elastic/kibana-app-services (Team:AppServices)

[tsullivan]

As of #94966, access to Reporting features can be customized using custom Kibana app privileges. This allows users that do not have the kibana_user role to use Reporting.

Allowing read-only users to create reports will inherently be fixed by #99890

[tsullivan]

Closing in favor of #99890