[Fleet]: User gets forbidden error under Agents tab for custom user with Agent policies None.

[amolnater-qasource]

Kibana Build details:

VERSION: 8.16.0 SNAPSHOT
BUILD: 77913
COMMIT: f2aba4624160124344e98dac19d5eefd83fa79ce

Role:

Integrations: All
Fleet: Read
Agents: All
Agent policies: None
Settings: Read

• Also reproducible for Settings: All.

Preconditions:

1. 8.16.0-SNAPSHOT Kibana cloud environment should be available.
2. New User should be created with above defined role.

Steps to reproduce:

1. Login with the above user.
2. Navigate to Agents tab.
3. Observe Forbidden error is displayed under Agents tab.

Expected Result:
User shouldn't get forbidden error under Agents tab for custom user with Agent policies None.

Screen Recording:

Settings.-.Fleet.-.Elastic.-.Google.Chrome.2024-09-03.15-33-34.mp4

Feature:
https://github.com/elastic/ingest-dev/issues/2903

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[amolnater-qasource]

@muskangulati-qasource Please review.

[muskangulati-qasource]

Secondary review on this ticket it Done!

[nchaulet]

Seems a bug introduced by now using the _bulk_get API instead of the retrieving all agent policies in #191661

[amolnater-qasource]

Hi Team,

We have revalidated this issue on latest 8.16.0 SNAPSHOT and found it fixed now.

Observations:

• User doesn't get forbidden error under Agents tab for custom user with Agent policies None.

Build details:
VERSION: 8.16.0 SNAPSHOT
BUILD: 78885
COMMIT: 4e4107b

Screen Recording

Agents.-.Fleet.-.Elastic.-.Google.Chrome.2024-10-08.14-08-13.mp4

Hence, we are marking this issue as QA:Validated.

Thanks!!