Scenario:
For a user missing the required privileges to update signal documents, the icon is visible and can be clicked. However, closing the signal will silently fail, with an error in the Network tab.

Privileges:

• Cluster: manage_api_key
• Index: read, view_index_metadata, create_doc on .siem-signals-default*, read and view_index_metadata on packetbeat-*
• Kibana: All on SIEM

What did I do? Click close signal icon

Suggestion:
Expose the background error.

Screenshot