From c783ac75b58474206f4c224d9e4cf00909e0186c Mon Sep 17 00:00:00 2001 From: Rachael Shaw Date: Thu, 16 Apr 2026 11:53:56 -0500 Subject: [PATCH] Simplify explanation of fleet-level user permissions (#43676) --- articles/role-based-access.md | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/articles/role-based-access.md b/articles/role-based-access.md index 85f7073a93..f052eb52b5 100644 --- a/articles/role-based-access.md +++ b/articles/role-based-access.md @@ -133,16 +133,12 @@ GitOps is an API-only and write-only role that can be used on CI/CD pipelines. Users in Fleet either have global access or access to specific fleets. -Users with access to specific fleets only have access to the [hosts](https://fleetdm.com/docs/using-fleet/rest-api#hosts), [software](https://fleetdm.com/docs/using-fleet/rest-api#software), and [policies](https://fleetdm.com/docs/using-fleet/rest-api#policies) assigned to -their fleet. +Users with access to specific fleets only have access to data for their assigned fleet. -Users with global access have access to all -[hosts](https://fleetdm.com/docs/using-fleet/rest-api#hosts), [software](https://fleetdm.com/docs/using-fleet/rest-api#software), [queries](https://fleetdm.com/docs/using-fleet/rest-api#queries), and [policies](https://fleetdm.com/docs/using-fleet/rest-api#policies). Check out [the user permissions +Global users can access data for all fleets. Check out [the user permissions table](#user-permissions) above for global user permissions. -Users can be assigned to multiple fleets in Fleet. - -Users with access to multiple fleets can be assigned different roles for each fleet. For example, a user can be given access to the "💻 Workstations" fleet and assigned the "Observer" role. This same user can be given access to the "📱🔐 Personal mobile devices" fleet and assigned the "Maintainer" role. +Users can be assigned to multiple fleets, and can have different roles for each fleet. For example, a user can be given access to the "💻 Workstations" fleet and assigned the "Observer" role. This same user can be given access to the "📱🔐 Personal mobile devices" fleet and assigned the "Maintainer" role. | **Action** | Observer | Observer+ | Technician | Maintainer | Admin | GitOps | | -------------------------------------------------------------------------------------------------------------------------------- | :-----------: | :------------: | :-------------: | :-------------: | :--------: | :---------: |