Alerts and Actions empty view in 7.11

[arisonl]

Version:
7.11

Deployment:
Elastic Cloud: europe-west1 (Belgium)

Describe the bug:
Alerts and Actions view empty despite the user having the required privileges to access it.

Steps to reproduce:

1. Create a role with the following privileges:

• Elasticsearch: All cluster, all to * index
• Kibana: All base privileges, to all applications in the default space (except ML and Stack Monitoring by default)

2. Assign the role to a user and try access the Alerts and Actions management view as that user.

Expected behavior:
User should have access to the Alerts and Actions management view. If they did not have the right privileges, they should not be able to access the navbar entry point.

Errors in browser console (if relevant):

For your attention: @legrego @gmmorris @joshdover

[elasticmachine]

Pinging @elastic/kibana-core (Team:Core)

[elasticmachine]

Pinging @elastic/kibana-core-ui (Team:Core UI)

[elasticmachine]

Pinging @elastic/kibana-alerting-services (Team:Alerting Services)

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[legrego]

I think the root cause is an API call to /api/features, which was introduced via #81876.

@elastic/kibana-alerting-services this specific API is only callable by users with the "Global All" Kibana Privilege. Users with a subset of privileges are not currently authorized to hit this endpoint.

[rashmivkulkarni]

Note: We may have to make the end to end test which currently runs as administrator to tweak it and use a specific user with limited privileges to cover this scenario.