[Fleet]: "Add Fleet Server" link is enabled on "Agent Policy" page for user role "Setting" set as "Read" only

[amolnater-qasource]

Kibana Build details:

VERSION: 8.14.0 SNAPSHOT
BUILD: 73095
COMMIT: 4047cc862b9f2a7c4a799805871eb001922e317b

Host OS: All

Role:

Integrations: All
Fleet: All
Agents: All
Agent policies: All
Settings: Read

Preconditions:

1. 8.14.0-SNAPSHOT Kibana cloud environment should be available.
2. New User should be created with above defined role.

Steps to reproduce:

1. From Super user create a Fleet Server agent policy.
2. Login with New User and navigate to Fleet>Agent policies tab.
3. Click Fleet Server Agent policy> click Add Fleet Server button
4. Add Fleet Server host and observe forbidden error is displayed.

Expected Result:
"Add Fleet Server" link should not be displayed on "Agent Policy" page for user role "Setting" set as "Read" only.

Screen Recording:

Agent.policies.-.Fleet.-.Elastic.-.Google.Chrome.2024-04-12.12-01-02.mp4

Feature:
https://github.com/elastic/ingest-dev/issues/2903

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[amolnater-qasource]

@manishgupta-qasource Please review.

[manishgupta-qasource]

Secondary review for this ticket is Done

[amolnater-qasource]

Hi @jen-huang

We have revalidated this issue on latest 8.14.0 SNAPSHOT and found this issue as partially fixed.

Observations:

• "Add Fleet Server" link is enabled on "Agent Policy" page for user role "Setting" set as "Read" only
• We are able to open "Add Fleet Server" flyout from the integrations tab.

Please let us know if this will be fixed too.

Screen Recording:

Agent.policies.-.Fleet.-.Elastic.-.Google.Chrome.2024-04-18.12-19-04.mp4

Build details:
VERSION: 8.14.0 SNAPSHOT
BUILD: 73512
COMMIT: 9369f3a

Hence, we are reopening this issue for further confirmation.

cc: @kpollich
Thanks!