diff --git a/ajax/subvisibility.php b/ajax/subvisibility.php
index 9a9608451f6..ebb12167a8f 100644
--- a/ajax/subvisibility.php
+++ b/ajax/subvisibility.php
@@ -36,7 +36,7 @@
 header("Content-Type: text/html; charset=UTF-8");
 Html::header_nocache();
 
-if (!empty($_POST['type']) && isset($_POST['items_id']) && ($_POST['items_id'] > 0)) {
+if (!empty($_POST['type'])) {
     $prefix = '';
     $suffix = '';
     if (!empty($_POST['prefix'])) {
@@ -47,21 +47,26 @@
     switch ($_POST['type']) {
         case 'Group':
         case 'Profile':
-            $params = ['value' => $_SESSION['glpiactive_entity'],
+            $rand = mt_rand();
+            $params = [
+                'value' => $_SESSION['glpiactive_entity'],
                 'name'  => $prefix . 'entities_id' . $suffix,
+                'width' => '100%',
+                'rand' => $rand,
             ];
             if (Session::canViewAllEntities()) {
                 $params['toadd'] = [-1 => __('No restriction')];
             }
-            echo "<table class='tab_format'><tr><td>";
-            echo htmlescape(Entity::getTypeName(1));
-            echo "</td><td>";
+            echo '<div class="col-6">';
+            echo "<label class=\"form-label\" for=\"dropdown_entities_id$rand\">" . htmlescape(Entity::getTypeName(1)) . "</label>";
             Entity::dropdown($params);
-            echo "</td><td>";
-            echo __s('Child entities');
-            echo "</td><td>";
-            Dropdown::showYesNo($prefix . 'is_recursive' . $suffix);
-            echo "</td></tr></table>";
+            echo "</div>";
+            echo "<div class=\"col-6\">";
+            echo "<label class=\"form-label\" for=\"dropdown_is_recursive$rand\">" . htmlescape(__('Child entities')) . "</label>";
+            Dropdown::showYesNo($prefix . 'is_recursive' . $suffix, 1, params: [
+                'rand' => $rand,
+            ]);
+            echo "</div>";
             break;
     }
 }
diff --git a/ajax/visibility.php b/ajax/visibility.php
index 78b0b2864fc..9cc27bb8c3b 100644
--- a/ajax/visibility.php
+++ b/ajax/visibility.php
@@ -55,33 +55,26 @@
         $_POST['prefix'] = '';
     }
 
-    echo "<div class='d-flex'>";
     switch ($_POST['type']) {
         case 'User':
             $params = [
                 'right' => isset($_POST['allusers']) ? 'all' : $_POST['right'],
-                'name' => $prefix . 'users_id' . $suffix,
+                'name'  => $prefix . 'users_id' . $suffix,
+                'width' => '100%',
+                'aria_label' => User::getTypeName(1),
             ];
             User::dropdown($params);
             $display = true;
             break;
 
         case 'Group':
-            $params             = ['rand' => $rand,
-                'name' => $prefix . 'groups_id' . $suffix,
-            ];
-            $params['toupdate'] = ['value_fieldname'
-                                                  => 'value',
-                'to_update'  => "subvisibility$rand",
-                'url'        => $CFG_GLPI["root_doc"] . "/ajax/subvisibility.php",
-                'moreparams' => ['items_id' => '__VALUE__',
-                    'type'     => $_POST['type'],
-                    'prefix'   => $_POST['prefix'],
-                ],
+            $params = [
+                'rand'  => $rand,
+                'name'  => $prefix . 'groups_id' . $suffix,
+                'width' => '100%',
+                'aria_label' => Group::getTypeName(1),
             ];
-
             Group::dropdown($params);
-            echo "<span id='subvisibility$rand'></span>";
             $display = true;
             break;
 
@@ -91,9 +84,9 @@
                 'name'        => $prefix . 'entities_id' . $suffix,
                 'entity'      => $_POST['entity'] ?? -1,
                 'entity_sons' => $_POST['is_recursive'] ?? false,
+                'width'       => '100%',
+                'aria_label'  => Entity::getTypeName(1),
             ]);
-            echo '<div class="ms-3">' . __s('Child entities') . '</div>';
-            Dropdown::showYesNo($prefix . 'is_recursive' . $suffix);
             $display = true;
             break;
 
@@ -104,26 +97,17 @@
                 $righttocheck = 'knowbase';
                 $checkright   = KnowbaseItem::READFAQ;
             }
-            $params             = [
+            $params = [
                 'rand'      => $rand,
                 'name'      => $prefix . 'profiles_id' . $suffix,
+                'width'     => '100%',
                 'condition' => [
                     'glpi_profilerights.name'     => $righttocheck,
                     'glpi_profilerights.rights'   => ['&', $checkright],
                 ],
+                'aria_label'  => Profile::getTypeName(1),
             ];
-            $params['toupdate'] = ['value_fieldname'
-                                                  => 'value',
-                'to_update'  => "subvisibility$rand",
-                'url'        => $CFG_GLPI["root_doc"] . "/ajax/subvisibility.php",
-                'moreparams' => ['items_id' => '__VALUE__',
-                    'type'     => $_POST['type'],
-                    'prefix'   => $_POST['prefix'],
-                ],
-            ];
-
             Profile::dropdown($params);
-            echo "<span id='subvisibility$rand'></span>";
             $display = true;
             break;
     }
@@ -132,5 +116,4 @@
         echo "<input type='submit' name='addvisibility' value=\"" . _sx('button', 'Add') . "\"
                    class='btn btn-primary ms-3'>";
     }
-    echo "</div>";
 }
diff --git a/css/includes/components/_kb.scss b/css/includes/components/_kb.scss
index bde2fdc6c91..21e6901df61 100644
--- a/css/includes/components/_kb.scss
+++ b/css/includes/components/_kb.scss
@@ -710,3 +710,15 @@
     padding: 1rem 1.25rem;
     border-top: 1px solid var(--tblr-border-color);
 }
+
+.visibility-type-col .select2-selection  {
+    // Merge borders with dropdown to its right
+    border-start-end-radius: 0 !important;
+    border-end-end-radius: 0 !important;
+}
+
+.visibility-item-col .select2-selection  {
+    // Merge borders with dropdown to its left
+    border-start-start-radius: 0 !important;
+    border-end-start-radius: 0 !important;
+}
diff --git a/css/includes/components/_utils.scss b/css/includes/components/_utils.scss
index cf3e43ad9f4..9afd5fc3039 100644
--- a/css/includes/components/_utils.scss
+++ b/css/includes/components/_utils.scss
@@ -77,6 +77,10 @@
     font-size: 5em !important;
 }
 
+.flex-grow-30 {
+    flex-grow: 30;
+}
+
 .opacity-100-hover:hover {
     opacity: 1 !important;
 }
diff --git a/js/glpi_dialog.js b/js/glpi_dialog.js
index 79d610a2e11..ff013384d81 100644
--- a/js/glpi_dialog.js
+++ b/js/glpi_dialog.js
@@ -110,7 +110,7 @@ var glpi_html_dialog = function({
          <div class="modal-dialog ${_.escape(dialogclass)}">
             <div class="modal-content">
                <div class="modal-header">
-                  <h2 id="${_.escape(id)}_title" class="fs-4 modal-title" tabindex="-1">${title}</h2>
+                  <h2 id="${_.escape(id)}_title" class="fs-4 modal-title d-flex align-items-center" tabindex="-1">${title}</h2>
                   <button type="button" class="btn-close" data-bs-dismiss="modal"
                            aria-label="${__("Close")}"></button>
                </div>
diff --git a/js/modules/Ajax.js b/js/modules/Ajax.js
index 37203f1e7d4..aa96ccf57e2 100644
--- a/js/modules/Ajax.js
+++ b/js/modules/Ajax.js
@@ -36,23 +36,36 @@
  * Perform a POST request to a GLPI endpoint.
  *
  * @param {string} url - The relative URL path (without root_doc prefix).
- * @param {Object | null} values - The data to send as JSON in the request body or null if the request doens't send any data.
+ * @param {Object | FormData | URLSearchParams | null} values - The data to send
+ *   in the request body, or null if no data.
+ *   Plain objects are serialized as JSON. FormData and URLSearchParams are sent
+ *   as-is (form data).
  * @returns {Promise<Response>} The fetch Response object.
  * @throws {Error} If the request fails or returns a non-ok status.
  */
 export async function post(url, values = null)
 {
     try {
+        const is_plain_object = values !== null
+            && !(values instanceof FormData)
+            && !(values instanceof URLSearchParams)
+        ;
+
+        const headers = {
+            'X-Requested-With': 'XMLHttpRequest',
+        };
+
+        if (is_plain_object) {
+            headers['Content-Type'] = 'application/json';
+        }
+
         const params = {
             method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'X-Requested-With': 'XMLHttpRequest',
-            },
+            headers,
         };
 
         if (values !== null) {
-            params.body = JSON.stringify(values);
+            params.body = is_plain_object ? JSON.stringify(values) : values;
         }
 
         const response = await fetch(`${CFG_GLPI.root_doc}/${url}`, params);
diff --git a/js/modules/Knowbase/ArticleController.js b/js/modules/Knowbase/ArticleController.js
index c02eecf0707..eeb2d706adc 100644
--- a/js/modules/Knowbase/ArticleController.js
+++ b/js/modules/Knowbase/ArticleController.js
@@ -178,8 +178,8 @@ export class GlpiKnowbaseArticleController
                 try {
                     this.#executeAction(e);
                 } catch (e) {
-                    console.error(e);
                     glpi_toast_error(__("An unexpected error occurred."));
+                    throw e;
                 }
             });
         }
@@ -468,7 +468,7 @@ export class GlpiKnowbaseArticleController
                 this.#deleteItem(params.id);
                 break;
             case EditorActionType.OPEN_MODAL:
-                this.#openModal(params.id, params.key, params.title, params.icon);
+                this.#openModal(params.id, params.key, params.title, params.icon ?? null);
                 break;
         }
     }
@@ -546,6 +546,7 @@ export class GlpiKnowbaseArticleController
      * @param {number} id
      * @param {string} key
      * @param {string} title
+     * @param {string | null} icon
      */
     #openModal(id, key, title, icon = null)
     {
diff --git a/js/modules/Knowbase/PermissionsFormController.js b/js/modules/Knowbase/PermissionsFormController.js
new file mode 100644
index 00000000000..06bc37ecdd2
--- /dev/null
+++ b/js/modules/Knowbase/PermissionsFormController.js
@@ -0,0 +1,191 @@
+/**
+ * ---------------------------------------------------------------------
+ *
+ * GLPI - Gestionnaire Libre de Parc Informatique
+ *
+ * http://glpi-project.org
+ *
+ * @copyright 2015-2026 Teclib' and contributors.
+ * @licence   https://www.gnu.org/licenses/gpl-3.0.html
+ *
+ * ---------------------------------------------------------------------
+ *
+ * LICENSE
+ *
+ * This file is part of GLPI.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ * ---------------------------------------------------------------------
+ */
+
+import { post } from '/js/modules/Ajax.js';
+
+const show_label = __('Show advanced options');
+const hide_label = __('Hide advanced options');
+
+export class GlpiKnowbasePermissionsFormController
+{
+    /**
+     * @type {object}
+     */
+    #visibilityDropdownParams;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #dropdown;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #visibility;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #visibilityRecursive;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #submitBtn;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #advancedToggle;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #advancedBlock;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #advancedContent;
+
+    /**
+     * @type {HTMLElement}
+     */
+    #advancedVisible = false;
+
+    /**
+     * @param {HTMLElement} container
+     * @param {string} rand
+     * @param {object} visibilityDropdownParams
+     */
+    constructor(container, rand, visibilityDropdownParams)
+    {
+        this.#visibilityDropdownParams = visibilityDropdownParams;
+
+        this.#dropdown            = document.getElementById(`dropdown__type${rand}`);
+        this.#visibility          = document.getElementById(`visibility${rand}`);
+        this.#visibilityRecursive = document.getElementById(`visibility-recursive${rand}`);
+        this.#submitBtn           = document.getElementById(`visibility-submit-btn${rand}`);
+        this.#advancedToggle      = document.getElementById(`visibility-advanced-toggle${rand}`);
+        this.#advancedBlock       = document.getElementById(`visibility-advanced${rand}`);
+        this.#advancedContent     = document.getElementById(`visibility-advanced-content${rand}`);
+
+        this.#bindEvents();
+    }
+
+    #resetAdvanced()
+    {
+        this.#advancedVisible = false;
+        this.#advancedBlock.classList.add('d-none');
+        this.#advancedContent.innerHTML = '';
+        this.#advancedToggle.innerHTML = `<i class="ti ti-settings me-1"></i>${show_label}`;
+    }
+
+    async #loadVisibility(type)
+    {
+        const params = new URLSearchParams({
+            ...this.#visibilityDropdownParams,
+            type,
+            nobutton: 1,
+        });
+        const response = await post('ajax/visibility.php', params);
+        const html = await response.text();
+        $(this.#visibility).html(html);
+    }
+
+    async #loadSubvisibility(type)
+    {
+        const params = new URLSearchParams({ type });
+        const response = await post('ajax/subvisibility.php', params);
+        const html = await response.text();
+        $(this.#advancedContent).html(html); // jQuery is needed here to run scripts
+    }
+
+    #bindEvents()
+    {
+        // Handle itemtype changes
+        // Note: select2 events only work with jQuery handlers
+        $(this.#dropdown).on('change', async (e) => {
+            this.#resetAdvanced();
+
+            // No type selected: hide item dropdown
+            if (e.target.value === '') {
+                this.#visibility.innerHTML = '';
+                this.#visibility.classList.add('d-none');
+                this.#visibilityRecursive.classList.add('d-none');
+                this.#submitBtn.classList.add('d-none');
+                this.#advancedToggle.classList.add('d-none');
+                return;
+            }
+
+            const type = e.target.value;
+
+            await this.#loadVisibility(type);
+            this.#visibility.classList.remove('d-none');
+            this.#submitBtn.classList.remove('d-none');
+
+            if (type === 'Entity') {
+                // Specific layout for entities (child entities dropdown)
+                this.#visibilityRecursive.classList.remove('d-none');
+                this.#advancedToggle.classList.add('d-none');
+            } else {
+                // Groups and profiles have access to advanced options
+                this.#visibilityRecursive.classList.add('d-none');
+
+                if (type === 'Group' || type === 'Profile') {
+                    this.#advancedToggle.classList.remove('d-none');
+                } else {
+                    this.#advancedToggle.classList.add('d-none');
+                }
+            }
+        });
+
+        // Handle advanced options toggle
+        this.#advancedToggle.addEventListener('click', async () => {
+            this.#advancedVisible = !this.#advancedVisible;
+
+            if (this.#advancedVisible) {
+                // Show advanced options
+                this.#advancedBlock.classList.remove('d-none');
+                await this.#loadSubvisibility(this.#dropdown.value);
+                const html = `<i class="ti ti-settings me-1"></i>${hide_label}`;
+                this.#advancedToggle.innerHTML = html;
+            } else {
+                // Hide advanced options
+                this.#advancedBlock.classList.add('d-none');
+                this.#advancedContent.innerHTML = '';
+                const html = `<i class="ti ti-settings me-1"></i>${show_label}`;
+                this.#advancedToggle.innerHTML = html;
+            }
+        });
+    }
+}
diff --git a/src/Glpi/Knowbase/SidePanel/PermissionsRenderer.php b/src/Glpi/Knowbase/SidePanel/PermissionsRenderer.php
index d7b28b3785c..0bc8dbe2f4b 100644
--- a/src/Glpi/Knowbase/SidePanel/PermissionsRenderer.php
+++ b/src/Glpi/Knowbase/SidePanel/PermissionsRenderer.php
@@ -65,7 +65,7 @@ public function getParams(KnowbaseItem $item): array
         $rand = mt_rand();
         $owner_id = (int) $item->fields['users_id'];
 
-        $entries = $this->buildEntries($item, $owner_id);
+        $entries = $this->buildEntries($item);
 
         $visiblity_dropdown_params = [
             'type'  => '__VALUE__',
@@ -84,10 +84,6 @@ public function getParams(KnowbaseItem $item): array
             'rand' => $rand,
             'can_edit' => $can_edit,
             'is_owner' => ($owner_id === Session::getLoginUserID()),
-            'owner' => [
-                'name' => getUserName($owner_id),
-                'users_id' => $owner_id,
-            ],
             'entries' => $entries,
             'visiblity_dropdown_params' => $visiblity_dropdown_params,
         ];
@@ -97,10 +93,9 @@ public function getParams(KnowbaseItem $item): array
      * Build entries array for the permissions list
      *
      * @param KnowbaseItem $item
-     * @param int $owner_id
      * @return array<int, array{itemtype: string, id: int, type: string, name: string, icon: string, badge_class: string, entity_name: ?string, is_recursive: bool, users_id: ?int}>
      */
-    private function buildEntries(KnowbaseItem $item, int $owner_id): array
+    private function buildEntries(KnowbaseItem $item): array
     {
         $id = $item->getID();
         $entries = [];
@@ -108,9 +103,6 @@ private function buildEntries(KnowbaseItem $item, int $owner_id): array
         $users = KnowbaseItem_User::getUsers($id);
         foreach ($users as $val) {
             foreach ($val as $data) {
-                if ((int) $data['users_id'] === $owner_id) {
-                    continue; // Owner displayed separately in footer
-                }
                 $entries[] = [
                     'itemtype'     => KnowbaseItem_User::class,
                     'id'           => $data['id'],
@@ -141,6 +133,7 @@ private function buildEntries(KnowbaseItem $item, int $owner_id): array
                     'icon'         => 'ti-users-group',
                     'badge_class'  => 'bg-green-lt',
                     'entity_name'  => $entity_name,
+                    'entities_id'  => $data['entities_id'],
                     'is_recursive' => (bool) $data['is_recursive'],
                 ];
             }
@@ -179,6 +172,7 @@ private function buildEntries(KnowbaseItem $item, int $owner_id): array
                     'icon'         => 'ti-id-badge-2',
                     'badge_class'  => 'bg-purple-lt',
                     'entity_name'  => $entity_name,
+                    'entities_id'  => $data['entities_id'],
                     'is_recursive' => (bool) $data['is_recursive'],
                 ];
             }
diff --git a/src/KnowbaseItem.php b/src/KnowbaseItem.php
index d79c15ef401..58456e3d301 100644
--- a/src/KnowbaseItem.php
+++ b/src/KnowbaseItem.php
@@ -1069,14 +1069,17 @@ private function getEditorActions(): array
                 ],
             );
 
+            $label =  __('Permissions');
+            $icon = "ti ti-lock";
             $actions[] = new EditorAction(
-                label: _n('Target', 'Targets', Session::getPluralNumber()),
-                icon: "ti ti-eye",
+                label: $label,
+                icon: $icon,
                 type: EditorActionType::OPEN_MODAL,
                 params: [
                     'id' => $this->fields['id'],
                     'key' => 'SidePanel/permissions',
-                    'title' => _n('Target', 'Targets', Session::getPluralNumber()),
+                    'title' => $label,
+                    'icon' => $icon,
                 ],
             );
             $actions[] = new EditorAction(
diff --git a/templates/pages/tools/kb/modal/permissions.html.twig b/templates/pages/tools/kb/modal/permissions.html.twig
index f00db140240..9635e5c85e3 100644
--- a/templates/pages/tools/kb/modal/permissions.html.twig
+++ b/templates/pages/tools/kb/modal/permissions.html.twig
@@ -30,119 +30,153 @@
  # ---------------------------------------------------------------------
  #}
 
-{% import "components/form/fields_macros.html.twig" as fields %}
+{% set has_entries = entries|length > 0 %}
 
-{# Add target form #}
-{% if can_edit %}
-    <div>
-        <form method="post" action="{{ 'KnowbaseItem'|itemtype_form_path }}">
-            <input type="hidden" name="knowbaseitems_id" value="{{ id }}">
-            <div class="d-flex flex-column gap-2">
-                {{ fields.dropdownItemTypes('_type', '', __('Add a target'), {
-                    types: ['Entity', 'Group', 'Profile', 'User'],
-                    rand: rand,
-                    mb: '',
-                }) }}
-                <div id="visibility-submit{{ rand }}" class="d-none d-flex gap-2 align-items-center">
-                    <div class="flex-grow-1">
-                        <div id="visibility{{ rand }}" class="kb-permission-visibility"></div>
-                    </div>
-                    <input type="submit"
-                           name="addvisibility"
-                           value="{{ _x('button', 'Add') }}"
-                           class="btn btn-primary">
-                </div>
-            </div>
-            <script>
-                $('#dropdown__type{{ rand }}').on('change', (e) => {
-                    const $submit = $('#visibility-submit{{ rand }}');
-                    if (e.target.value === '') {
-                        $('#visibility{{ rand }}').empty();
-                        $submit.addClass('d-none').removeClass('d-flex');
-                        return;
-                    }
-                    $('#visibility{{ rand }}').load(
-                        `${CFG_GLPI.root_doc}/ajax/visibility.php`,
-                        {
-                            ...{{ visiblity_dropdown_params|json_encode|raw }},
-                            type: e.target.value,
-                            nobutton: 1,
-                        },
-                        () => $submit.removeClass('d-none').addClass('d-flex')
-                    );
-                });
-            </script>
-        </form>
-    </div>
-    <hr class="mt-3 mb-2">
-{% endif %}
+{# Status label #}
+<h3 class="mb-2 fs-4" data-testid="permissions-status">
+    {{ __('Can be viewed by:') }}
+</h3>
 
 {# Permissions list #}
-<div class="list-group list-group-flush" data-glpi-permissions-list>
+<ul class="list-group list-group-flush" data-testid="permissions-list" data-glpi-permissions-list>
+    {% if not has_entries %}
+        <div class="text-secondary py-1" data-testid="empty-permissions">
+            {{ __('This article is not yet visible to anyone.') }}
+        </div>
+    {% endif %}
+
     {% for entry in entries %}
-            <div class="list-group-item d-flex align-items-center gap-2 px-0"
-                 data-glpi-permission-id="{{ entry.id }}"
-                 data-glpi-permission-itemtype="{{ entry.itemtype }}">
+        <li class="list-group-item d-flex align-items-center gap-2 py-2 px-0 border-0"
+            data-testid="permission-entry"
+            data-glpi-permission-id="{{ entry.id }}"
+            data-glpi-permission-itemtype="{{ entry.itemtype }}"
+        >
 
-                {# Avatar: user picture for Users, typed icon for others #}
-                {% if entry.type == 'User' %}
-                    {{ include('components/user/picture.html.twig', {
-                        users_id: entry.users_id,
-                        avatar_size: 'avatar-sm',
-                        with_link: false,
-                        enable_anonymization: false,
-                    }) }}
-                {% else %}
-                    <span class="avatar avatar-sm rounded {{ entry.badge_class }}">
-                        <i class="ti {{ entry.icon }}"></i>
-                    </span>
-                {% endif %}
+            {# Avatar: user picture for Users, typed icon for others #}
+            {% if entry.type == 'User' %}
+                {{ include('components/user/picture.html.twig', {
+                    users_id: entry.users_id,
+                    avatar_size: 'avatar-sm',
+                    with_link: false,
+                    enable_anonymization: false,
+                }) }}
+            {% else %}
+                <span
+                    class="avatar avatar-sm rounded {{ entry.badge_class }}"
+                    title="{{ entry.type|itemtype_name }}"
+                    data-bs-toggle="tooltip"
+                    data-bs-placement="left"
+                >
+                    <i class="ti {{ entry.icon }}"></i>
+                </span>
+            {% endif %}
 
-                {# Info #}
-                <div class="flex-grow-1" style="min-width: 0;">
-                    <div class="d-flex align-items-center gap-1">
-                        <span class="fw-medium text-truncate">{{ entry.name }}</span>
-                        {% if entry.is_recursive %}
-                            <span class="badge bg-secondary-lt"
-                                  title="{{ __('Recursive') }}"
-                                  data-bs-toggle="tooltip">
-                                <i class="ti ti-arrow-iteration me-1"></i>R
-                            </span>
-                        {% endif %}
-                    </div>
-                    <div class="text-secondary small">{{ __('Can view') }}</div>
-                    {% if entry.entity_name %}
-                        <div class="text-secondary small text-truncate">{{ entry.entity_name }}</div>
+            {# Info #}
+            <div class="flex-grow-1" style="min-width: 0;">
+                <div class="d-flex align-items-center gap-1" data-testid="entry-label">
+                    <span class="fw-medium text-truncate">{{ entry.name }}</span>
+                    {% if entry.type == "Entity" and entry.is_recursive %}
+                        <span class="text-secondary">({{ __("recursive") }})</span>
                     {% endif %}
                 </div>
-
-                {# Delete button #}
-                {% if can_edit %}
-                    <button type="button"
-                            class="btn btn-ghost-danger btn-sm btn-icon ms-auto"
-                            data-glpi-permission-delete
-                            title="{{ __('Delete') }}"
-                            data-bs-toggle="tooltip">
-                        <i class="ti ti-trash"></i>
-                    </button>
+                {% if entry.entity_name and (entry.entities_id != 0 or entry.is_recursive != 1) %}
+                    <div class="text-secondary small text-truncate" data-testid="entry-context">
+                        {{ entry.entity_name }}
+                        {% if entry.type != "Entity" and entry.is_recursive %}
+                            <span>({{ __("recursive") }})</span>
+                        {% endif %}
+                    </div>
                 {% endif %}
             </div>
+
+            {# Delete button #}
+            {% if can_edit %}
+                <button type="button"
+                    class="btn btn-ghost-danger btn-sm btn-icon ms-auto"
+                    data-glpi-permission-delete
+                    title="{{ __('Delete') }}"
+                    data-bs-toggle="tooltip"
+                >
+                    <i class="ti ti-trash"></i>
+                </button>
+            {% endif %}
+        </li>
     {% endfor %}
-</div>
+</ul>
 
-{# Owner footer (full-width, differentiated background) #}
-<div class="kb-permission-owner d-flex align-items-center gap-2">
-    {{ include('components/user/picture.html.twig', {
-        users_id: owner.users_id,
-        avatar_size: 'avatar-sm',
-        with_link: false,
-        enable_anonymization: false,
-    }) }}
-    <div class="flex-grow-1" style="min-width: 0;">
-        <span class="fw-medium text-truncate d-block">{{ owner.name }}</span>
-        <div class="text-secondary small">{{ __('Owner') }}</div>
+{# Add target form #}
+{% if can_edit %}
+    <div class="mt-4">
+        <form method="post" action="{{ 'KnowbaseItem'|itemtype_form_path }}">
+            <input type="hidden" name="knowbaseitems_id" value="{{ id }}">
+            {% set add_label = __('Add access for') %}
+            <div class="row g-3" id="kb-permissions-form-{{ rand }}" data-testid="publish-form">
+                {# Row 1: type + item dropdowns + Entity child entities inline #}
+                <div class="col-12">
+                    <div class="row g-2 align-items-end">
+                        <div class="col">
+                            <label class="form-label">{{ add_label }}</label>
+                            <div class="input-group">
+                                <div class="flex-grow-1 visibility-type-col" id="visibility-type-col{{ rand }}">
+                                    {% do call('Dropdown::showItemTypes', ['_type', ['Entity', 'Group', 'Profile', 'User'], {
+                                        'rand': rand,
+                                        'value': '',
+                                        'emptylabel': __('Select a type...'),
+                                        'aria_label': add_label,
+                                        'width': '100%',
+                                    }]) %}
+                                </div>
+                                <div class="flex-grow-30 d-none visibility-item-col" id="visibility{{ rand }}" style="min-width: 0; flex-basis: 0;"></div>
+                            </div>
+                        </div>
+                        <div class="col-auto d-none" id="visibility-recursive{{ rand }}" data-testid="child-entities-label">
+                            <label
+                                class="form-label"
+                                for="dropdown_is_recursive{{ rand }}"
+                            >{{ __('Child entities') }}</label>
+                            {% do call('Dropdown::showYesNo', ['is_recursive', 1, -1, {
+                                rand: rand,
+                            }]) %}
+                        </div>
+                    </div>
+                </div>
+                {# Advanced options #}
+                <div id="visibility-advanced{{ rand }}" class="col-12 d-none">
+                    <div id="visibility-advanced-content{{ rand }}" class="row g-3 kb-permission-visibility" data-testid="advanced-content"></div>
+                </div>
+                {# Toggle + Submit #}
+                <div class="col-12 d-flex justify-content-between align-items-center">
+                    <button type="button"
+                        id="visibility-advanced-toggle{{ rand }}"
+                        class="btn btn-sm btn-link text-start p-0 d-none"
+                    >
+                        <i class="ti ti-settings me-1"></i>{{ __('Show advanced options') }}
+                    </button>
+                    <div class="ms-auto">
+                        <button type="submit"
+                                id="visibility-submit-btn{{ rand }}"
+                                name="addvisibility"
+                                class="btn btn-primary d-none">
+                            <i class="ti ti-plus me-1"></i>{{ _x('button', 'Add') }}
+                        </button>
+                    </div>
+                </div>
+            </div>
+            <script type="module">
+                (async () => {
+                    const { GlpiKnowbasePermissionsFormController } = await import(
+                        "{{ js_path('js/modules/Knowbase/PermissionsFormController.js') }}"
+                    );
+                    new GlpiKnowbasePermissionsFormController(
+                        document.getElementById('kb-permissions-form-{{ rand }}'),
+                        '{{ rand }}',
+                        {{ visiblity_dropdown_params|json_encode|raw }},
+                    );
+                })();
+            </script>
+        </form>
     </div>
-</div>
+{% endif %}
 
 {% if can_edit %}
 <script>
diff --git a/tests/e2e/pages/KnowbaseItemPage.ts b/tests/e2e/pages/KnowbaseItemPage.ts
index b6846aebe16..ca71ed05d78 100644
--- a/tests/e2e/pages/KnowbaseItemPage.ts
+++ b/tests/e2e/pages/KnowbaseItemPage.ts
@@ -224,6 +224,17 @@ export class KnowbaseItemPage extends GlpiPage
         return this.getLink("Scheduled");
     }
 
+    public async doOpenVisibilityModal(): Promise<void>
+    {
+        await this.page.getByTitle('More actions').click();
+        await this.getButton('Permissions').click();
+    }
+
+    public getVisibilityModal(): Locator
+    {
+        return this.page.getByRole('dialog');
+    }
+
     public getScheduledStartDateInput(): Locator
     {
         return this.page.getByPlaceholder('No start date').filter({visible: true});
diff --git a/tests/e2e/specs/Knowbase/permissions.spec.ts b/tests/e2e/specs/Knowbase/permissions.spec.ts
index acbb84af8fa..862fbc2a170 100644
--- a/tests/e2e/specs/Knowbase/permissions.spec.ts
+++ b/tests/e2e/specs/Knowbase/permissions.spec.ts
@@ -33,63 +33,338 @@
 import { expect, test } from "../../fixtures/glpi_fixture";
 import { KnowbaseItemPage } from "../../pages/KnowbaseItemPage";
 import { Profiles } from "../../utils/Profiles";
-import { getWorkerEntityId } from "../../utils/WorkerEntities";
+import { getUniqueName } from "../../utils/Random";
+import { getWorkerEntityId, getWorkerEntityName } from "../../utils/WorkerEntities";
 
-test('Can view permissions modal', async ({ page, profile, api }) => {
+test('Can delete a permission from the modal', async ({ page, profile, api }) => {
     await profile.set(Profiles.SuperAdmin);
     const kb = new KnowbaseItemPage(page);
 
-    const entity_id = getWorkerEntityId();
-    const id = await api.createItem('KnowbaseItem', {
-        name: 'KB entry for permissions test',
-        entities_id: entity_id,
-        answer: "Test content",
-    });
-    await api.createItem('Entity_KnowbaseItem', {
-        knowbaseitems_id: id,
-        entities_id: entity_id,
-        is_recursive: 0,
-    });
+    // Arrange: create an article with one entity visibility rule.
+    const id = await api.knowbase.createArticle();
+    await api.knowbase.addEntityVisibility(id, getWorkerEntityId(), true);
 
+    // Act: open the modal and click the delete button.
     await kb.goto(id);
-    await expect(page.getByText('Test content')).toBeVisible();
+    await kb.doOpenVisibilityModal();
+    await expect(page.getByTestId('permission-entry')).toHaveCount(1);
+    await kb.getVisibilityModal().getByRole('button', { name: "Delete" }).click();
+
+    // Assert: the entry should be removed from the DOM.
+    await expect(kb.getVisibilityModal().getByRole('button', { name: "Delete" })).not.toBeAttached();
+    await expect(page.getByTestId('permission-entry')).toHaveCount(0);
+});
+
+test('Can add user permission', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
 
-    await page.getByTitle('More actions').click();
-    await kb.getButton('Targets').click();
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
 
-    const modal = page.getByRole('dialog');
-    await expect(modal).toBeVisible();
+    // Act: open the permission modal and add a user permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "User",
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("User"),
+        "glpi",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
 
-    await expect(modal.getByRole('button', { name: 'Delete' })).toBeVisible();
+    // Assert: user should be added to the permission list
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText("glpi");
+    await expect(entry.getByTestId("entry-context")).not.toBeAttached();
 });
 
-test('Can delete a permission from the modal', async ({ page, profile, api }) => {
+test('Can add entity permission', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+
+    // Act: open the permission modal and add a user permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Entity",
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Child entities"),
+        "No",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: entity should be added to the permission list
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()}`
+    );
+    await expect(entry.getByTestId("entry-context")).not.toBeAttached();
+});
+
+test('Can add entity permission (recursive)', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+
+    // Act: open the permission modal and add an entity permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Entity",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: entity should be added to the permission list
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()} (recursive)`
+    );
+    await expect(entry.getByTestId("entry-context")).not.toBeAttached();
+});
+
+test('Can add group permission', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+    const group_name = getUniqueName("My group");
+    await api.createItem('Group', {
+        name: group_name,
+        entities_id: getWorkerEntityId(),
+    });
+
+    // Act: open the permission modal and add a group permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Group",
+    );
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Group"),
+        group_name,
+    );
+    await expect(kb.getDropdownByLabel("Entity")).toBeHidden();
+    await expect(kb.getDropdownByLabel("Child entities")).toBeHidden();
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: group should be added to the permission list
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText(group_name);
+    await expect(entry.getByTestId("entry-context")).not.toBeAttached();
+});
+
+test('Can add group permission with recursive context', async ({
+    page,
+    profile,
+    api,
+}) => {
     await profile.set(Profiles.SuperAdmin);
     const kb = new KnowbaseItemPage(page);
 
-    const entity_id = getWorkerEntityId();
-    const id = await api.createItem('KnowbaseItem', {
-        name: 'KB entry for permission delete test',
-        entities_id: entity_id,
-        answer: "Test content",
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+    const group_name = getUniqueName("My group");
+    await api.createItem('Group', {
+        name: group_name,
+        entities_id: getWorkerEntityId(),
     });
-    await api.createItem('Entity_KnowbaseItem', {
-        knowbaseitems_id: id,
-        entities_id: entity_id,
-        is_recursive: 0,
+
+    // Act: open the permission modal and add a group permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Group",
+    );
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Group"),
+        group_name,
+    );
+    await page.getByRole('button', { name: "Show advanced options" }).click();
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Entity"),
+        getWorkerEntityName(),
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Child entities"),
+        "Yes",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: group should be added to the permission list with context
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText(group_name);
+    await expect(entry.getByTestId("entry-context")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()} (recursive)`
+    );
+});
+
+test('Can add group permission with context', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+    const group_name = getUniqueName("My group");
+    await api.createItem('Group', {
+        name: group_name,
+        entities_id: getWorkerEntityId(),
     });
 
+    // Act: open the permission modal and add a group permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Group",
+    );
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Group"),
+        group_name,
+    );
+    await page.getByRole('button', { name: "Show advanced options" }).click();
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Entity"),
+        getWorkerEntityName(),
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Child entities"),
+        "No",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: group should be added to the permission list with context
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText(group_name);
+    await expect(entry.getByTestId("entry-context")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()}`
+    );
+});
+
+test('Can add profile permission', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+
+    // Act: open the permission modal and add a profile permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Profile",
+    );
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Profile"),
+        "Admin",
+    );
+    await expect(kb.getDropdownByLabel("Entity")).toBeHidden();
+    await expect(kb.getDropdownByLabel("Child entities")).toBeHidden();
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: profile should be added to the permission list
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText("Admin");
+    await expect(entry.getByTestId("entry-context")).not.toBeAttached();
+});
+
+test('Can add profile permission with recursive context', async ({
+    page,
+    profile,
+    api,
+}) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
+
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
+
+    // Act: open the permission modal and add a profile permission
     await kb.goto(id);
-    await page.getByTitle('More actions').click();
-    await kb.getButton('Targets').click();
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Profile",
+    );
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Profile"),
+        "Observer",
+    );
+    await page.getByRole('button', { name: "Show advanced options" }).click();
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Entity"),
+        getWorkerEntityName(),
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Child entities"),
+        "Yes",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
+
+    // Assert: profile should be added to the permission list with context
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText("Observer");
+    await expect(entry.getByTestId("entry-context")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()} (recursive)`
+    );
+});
 
-    const modal = page.getByRole('dialog');
-    await expect(modal).toBeVisible();
+test('Can add profile permission with context', async ({ page, profile, api }) => {
+    await profile.set(Profiles.SuperAdmin);
+    const kb = new KnowbaseItemPage(page);
 
-    const deleteBtn = modal.getByRole('button', { name: 'Delete' });
-    await expect(deleteBtn).toBeVisible();
+    // Arrange: create a KB article without permissions
+    const id = await api.knowbase.createArticle();
 
-    await deleteBtn.click();
+    // Act: open the permission modal and add a profile permission
+    await kb.goto(id);
+    await kb.doOpenVisibilityModal();
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Add access for"),
+        "Profile",
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Profile"),
+        "Observer",
+    );
+    await page.getByRole('button', { name: "Show advanced options" }).click();
+    await kb.doSearchAndClickDropdownValue(
+        kb.getDropdownByLabel("Entity"),
+        getWorkerEntityName(),
+    );
+    await kb.doSetDropdownValue(
+        kb.getDropdownByLabel("Child entities"),
+        "No",
+    );
+    await page.getByRole('dialog').getByRole('button', { name: "Add " }).click();
 
-    await expect(deleteBtn).not.toBeAttached();
+    // Assert: profile should be added to the permission list with context
+    await kb.doOpenVisibilityModal();
+    const entry = page.getByTestId('permission-entry');
+    await expect(entry.getByTestId("entry-label")).toHaveText("Observer");
+    await expect(entry.getByTestId("entry-context")).toHaveText(
+        `Root entity > E2E tests entity > ${getWorkerEntityName()}`
+    );
 });
diff --git a/tests/e2e/utils/Api.ts b/tests/e2e/utils/Api.ts
index 3b0df39be00..3bffe96ed71 100644
--- a/tests/e2e/utils/Api.ts
+++ b/tests/e2e/utils/Api.ts
@@ -35,8 +35,8 @@ import { openSync, closeSync, unlinkSync, existsSync } from "fs";
 import { tmpdir } from "os";
 import { join } from "path";
 import { Config } from "./Config";
-import { WorkerSessionCache } from "./WorkerSessionCache";
 import { KnowbaseApi } from "./KnowbaseApi";
+import { WorkerSessionCache } from "./WorkerSessionCache";
 
 const ENTITY_LOCK_FILE = join(tmpdir(), 'glpi-e2e-entity-creation.lock');
 const ASSET_DEFINITION_LOCK_FILE = join(tmpdir(), 'glpi-e2e-asset-definition-creation.lock');
diff --git a/tests/e2e/utils/KnowbaseApi.ts b/tests/e2e/utils/KnowbaseApi.ts
index e15dd3a0b47..f22b7e45a98 100644
--- a/tests/e2e/utils/KnowbaseApi.ts
+++ b/tests/e2e/utils/KnowbaseApi.ts
@@ -56,6 +56,18 @@ export class KnowbaseApi
         });
     }
 
+    public async addEntityVisibility(
+        kb_id: number,
+        entity_id: number,
+        is_recursive: boolean,
+    ): Promise<number> {
+        return await this.api.createItem('Entity_KnowbaseItem', {
+            knowbaseitems_id: kb_id,
+            entities_id: entity_id,
+            is_recursive: is_recursive ? 1 : 0,
+        });
+    }
+
     public async addTranslation(kb_id: number, language: string, params: {
         name: string,
         answer: string,
@@ -79,3 +91,5 @@ export class KnowbaseApi
         );
     }
 }
+
+
diff --git a/tests/e2e/utils/Random.ts b/tests/e2e/utils/Random.ts
new file mode 100644
index 00000000000..94e8b150791
--- /dev/null
+++ b/tests/e2e/utils/Random.ts
@@ -0,0 +1,38 @@
+/**
+ * ---------------------------------------------------------------------
+ *
+ * GLPI - Gestionnaire Libre de Parc Informatique
+ *
+ * http://glpi-project.org
+ *
+ * @copyright 2015-2026 Teclib' and contributors.
+ * @licence   https://www.gnu.org/licenses/gpl-3.0.html
+ *
+ * ---------------------------------------------------------------------
+ *
+ * LICENSE
+ *
+ * This file is part of GLPI.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ * ---------------------------------------------------------------------
+ */
+
+import { randomUUID } from "crypto";
+
+export function getUniqueName(name: string): string
+{
+    return `${name} ${randomUUID()}`;
+}
diff --git a/tests/e2e/utils/WorkerEntities.ts b/tests/e2e/utils/WorkerEntities.ts
index dfe72179772..716919e2554 100644
--- a/tests/e2e/utils/WorkerEntities.ts
+++ b/tests/e2e/utils/WorkerEntities.ts
@@ -42,6 +42,12 @@ export function getWorkerEntityId(): number
     return test.info().parallelIndex + 2;
 }
 
+export function getWorkerEntityName(): string
+{
+    const worker_index = String(test.info().parallelIndex + 1).padStart(2, '0');
+    return `E2E worker entity ${worker_index}`;
+}
+
 export function getWorkerUserId(): number
 {
     return test.info().parallelIndex + 8;
diff --git a/tests/functional/Glpi/Knowbase/SidePanel/PermissionsRendererTest.php b/tests/functional/Glpi/Knowbase/SidePanel/PermissionsRendererTest.php
new file mode 100644
index 00000000000..6bd1888a292
--- /dev/null
+++ b/tests/functional/Glpi/Knowbase/SidePanel/PermissionsRendererTest.php
@@ -0,0 +1,401 @@
+<?php
+
+/**
+ * ---------------------------------------------------------------------
+ *
+ * GLPI - Gestionnaire Libre de Parc Informatique
+ *
+ * http://glpi-project.org
+ *
+ * @copyright 2015-2026 Teclib' and contributors.
+ * @licence   https://www.gnu.org/licenses/gpl-3.0.html
+ *
+ * ---------------------------------------------------------------------
+ *
+ * LICENSE
+ *
+ * This file is part of GLPI.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ * ---------------------------------------------------------------------
+ */
+
+namespace tests\units\Glpi\Knowbase\SidePanel;
+
+use Entity;
+use Entity_KnowbaseItem;
+use Glpi\Application\View\TemplateRenderer;
+use Glpi\Knowbase\SidePanel\PermissionsRenderer;
+use Glpi\Tests\DbTestCase;
+use Group;
+use Group_KnowbaseItem;
+use KnowbaseItem;
+use KnowbaseItem_Profile;
+use KnowbaseItem_User;
+use Profile;
+use Symfony\Component\DomCrawler\Crawler;
+use User;
+
+final class PermissionsRendererTest extends DbTestCase
+{
+    public function testEmptyState(): void
+    {
+        // Arrange: create a KB article without permissions
+        $kb = $this->createArticle();
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: empty state label should be printed
+        $this->assertCount(1, $this->getEmptyPermissionNode($permissions));
+    }
+
+    public function testWithUser(): void
+    {
+        // Arrange: create a KB article visible for a user
+        $kb = $this->createArticle();
+        $this->addUserVisiblity($kb, getItemByTypeName(User::class, "glpi"));
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the user name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("glpi", $this->getEntryLabel($entry)->text());
+        $this->assertCount(0, $this->getEntryContext($entry));
+    }
+
+    public function testWithGroup(): void
+    {
+        // Arrange: create a KB article visible for a group
+        $kb = $this->createArticle();
+        $this->addGroupVisiblity($kb, getItemByTypeName(
+            Group::class,
+            "_test_group_1",
+        ));
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the group name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("_test_group_1", $this->getEntryLabel($entry)->text());
+        $this->assertCount(0, $this->getEntryContext($entry));
+    }
+
+    public function testWithGroupAndContext1(): void
+    {
+        // Arrange: create a KB article visible for a group on a target entity
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addGroupVisiblity(
+            article: $kb,
+            group: getItemByTypeName(Group::class, "_test_group_1"),
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the group name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("_test_group_1", $this->getEntryLabel($entry)->text());
+        $this->assertEquals(
+            "Root entity > _test_root_entity (recursive)",
+            $this->getEntryContext($entry)->text()
+        );
+    }
+
+    public function testWithGroupAndContext2(): void
+    {
+        // Arrange: create a KB article visible for a group on a target entity,
+        // with recursion disabled.
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addGroupVisiblity(
+            article: $kb,
+            group: getItemByTypeName(Group::class, "_test_group_1"),
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+            is_recursive: false,
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the group name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("_test_group_1", $this->getEntryLabel($entry)->text());
+        $this->assertEquals(
+            "Root entity > _test_root_entity",
+            $this->getEntryContext($entry)->text()
+        );
+    }
+
+    public function testWithEntity(): void
+    {
+        // Arrange: create a KB article visible for a group on a target entity,
+        // with recursion disabled.
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addEntityVisiblity(
+            article: $kb,
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+            is_recursive: false,
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the entity name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals(
+            "Root entity > _test_root_entity",
+            $this->getEntryLabel($entry)->text()
+        );
+    }
+
+    public function testWithEntityRecursive(): void
+    {
+        // Arrange: create a KB article visible for a group on a target entity,
+        // with recursion disabled.
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addEntityVisiblity(
+            article: $kb,
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+            is_recursive: true,
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the entity name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals(
+            "Root entity > _test_root_entity (recursive)",
+            $this->getEntryLabel($entry)->text()
+        );
+    }
+
+    public function testWithProfile(): void
+    {
+        // Arrange: create a KB article visible for a profile
+        $kb = $this->createArticle();
+        $this->addProfileVisiblity($kb, getItemByTypeName(
+            Profile::class,
+            "Admin",
+        ));
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the profile name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("Admin", $this->getEntryLabel($entry)->text());
+        $this->assertCount(0, $this->getEntryContext($entry));
+    }
+
+    public function testWithProfileAndContext1(): void
+    {
+        // Arrange: create a KB article visible for a profile on a target entity
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addProfileVisiblity(
+            article: $kb,
+            profile: getItemByTypeName(Profile::class, "Technician"),
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the profile name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("Technician", $this->getEntryLabel($entry)->text());
+        $this->assertEquals(
+            "Root entity > _test_root_entity (recursive)",
+            $this->getEntryContext($entry)->text()
+        );
+    }
+
+    public function testWithProfileAndContext2(): void
+    {
+        // Arrange: create a KB article visible for a profile on a target entity,
+        // with recursion disabled.
+        $this->login();
+        $kb = $this->createArticle();
+        $this->addProfileVisiblity(
+            article: $kb,
+            profile: getItemByTypeName(Profile::class, "Observer"),
+            entity: getItemByTypeName(Entity::class, "_test_root_entity"),
+            is_recursive: false,
+        );
+
+        // Act: render permission content
+        $permissions = $this->renderPermissions($kb);
+
+        // Assert: an entry should be visible with the profile name
+        $this->assertCount(0, $this->getEmptyPermissionNode($permissions));
+
+        $entries = $this->getEntriesNodes($permissions);
+        $this->assertCount(1, $entries);
+
+        $entry = $entries->eq(0);
+        $this->assertEquals("Observer", $this->getEntryLabel($entry)->text());
+        $this->assertEquals(
+            "Root entity > _test_root_entity",
+            $this->getEntryContext($entry)->text()
+        );
+    }
+
+    private function renderPermissions(KnowbaseItem $kb): Crawler
+    {
+        $permissions = new PermissionsRenderer();
+        $html = TemplateRenderer::getInstance()->render(
+            $permissions->getTemplate(),
+            $permissions->getParams($kb),
+        );
+
+        return new Crawler($html);
+    }
+
+    private function getEmptyPermissionNode(Crawler $parent): Crawler
+    {
+        return $parent->filter('[data-testid="empty-permissions"]');
+    }
+
+    private function getEntriesNodes(Crawler $parent): Crawler
+    {
+        return $parent->filter('[data-testid="permission-entry"]');
+    }
+
+    private function getEntryLabel(Crawler $parent): Crawler
+    {
+        return $parent->filter('[data-testid="entry-label"]');
+    }
+
+    private function getEntryContext(Crawler $parent): Crawler
+    {
+        return $parent->filter('[data-testid="entry-context"]');
+    }
+
+    private function createArticle(
+        string $name = 'My article',
+        string $content = 'My content',
+    ): KnowbaseItem {
+        return $this->createItem(KnowbaseItem::class, [
+            'name' => $name,
+            'answer' => $content,
+        ]);
+    }
+
+    private function addUserVisiblity(
+        KnowbaseItem $article,
+        User $user,
+    ): void {
+        $this->createItem(KnowbaseItem_User::class, [
+            'knowbaseitems_id' => $article->getID(),
+            'users_id' => $user->getID(),
+        ]);
+    }
+
+    private function addGroupVisiblity(
+        KnowbaseItem $article,
+        Group $group,
+        ?Entity $entity = null,
+        bool $is_recursive = true,
+    ): void {
+        if ($entity === null) {
+            $entity = getItemByTypeName(Entity::class, "Root entity");
+        }
+
+        $this->createItem(Group_KnowbaseItem::class, [
+            'knowbaseitems_id' => $article->getID(),
+            'groups_id' => $group->getID(),
+            'entities_id' => $entity->getID(),
+            'is_recursive' => $is_recursive,
+        ]);
+    }
+
+    private function addEntityVisiblity(
+        KnowbaseItem $article,
+        Entity $entity,
+        bool $is_recursive,
+    ): void {
+        $this->createItem(Entity_KnowbaseItem::class, [
+            'knowbaseitems_id' => $article->getID(),
+            'entities_id' => $entity->getID(),
+            'is_recursive' => $is_recursive,
+        ]);
+    }
+
+    private function addProfileVisiblity(
+        KnowbaseItem $article,
+        Profile $profile,
+        ?Entity $entity = null,
+        bool $is_recursive = true,
+    ): void {
+        if ($entity === null) {
+            $entity = getItemByTypeName(Entity::class, "Root entity");
+        }
+
+        $this->createItem(KnowbaseItem_Profile::class, [
+            'knowbaseitems_id' => $article->getID(),
+            'profiles_id' => $profile->getID(),
+            'entities_id' => $entity->getID(),
+            'is_recursive' => $is_recursive,
+        ]);
+    }
+}