Page History

...

The other, and perhaps more compelling, incentive for this change is that the current ACL settings breaks a certain functionality (and this functionality seems to have been broken for a while). As mentioned in the above table the minimum required permission for DescribeGroup and OffsetFetch is Describe and Read, respectively. But implementation of the describe group command line makes use of OffsetFetch API (version 0 and 1 pre-KIP-88, and version 2 post-KIP-88). Therefore, a user who is granted the current minimum requirement permission Describe for DescribeGroup still would not be able to run the describe group command and get the expected result. They would see something like this in the output:

...