[Onboarding] Check for user privileges before creating an API key

[gbamparop]

📓 Summary

The API keys needed to configure the Elastic Agent and the OTel collector to ingest data into Elasticsearch are created automatically when users follow one of the quick-start onboarding flows. However, since they need at least the manage_own_api_key cluster privilege to create API keys, there can be cases when they don't have the privileges required which might result in an error that is propagated in the UI. Some onboarding flows handle this gracefully by displaying an appropriate message to users.

All onboarding flows should follow the same principle, first checking whether the necessary permissions are in place before creating API keys.

OpenTelemetry

Auto-detection flow

✔ Acceptance criteria

• All onboarding flows should check whether users have adequate privileges before creating an API key
• If certain privileges are missing, they will be displayed in the UI along with the message prompting users to get the required permissions
• All onboarding flows should use the same UX and messaging in the above scenarios

[elasticmachine]

Pinging @elastic/obs-ux-logs-team (Team:obs-ux-logs)

[elasticmachine]

Pinging @elastic/obs-ux-onboarding-team (Feature: Observability Onboarding)