[APM] Error when creating service groups with insufficient privileges

[crespocarlos]

Summary

Service Group creation feature fails when done without saved objects edit permission

Other CRUD operations will also fail and should be properly handled.

Steps to reproduce

Stateful

• Create a user with elasticsearch index privileges:
  • indices: metrics-apm,apm,traces-apm,logs-apm
  • privileges: 'read', 'view_index_metadata'
  • and kibana privileges: APM and User Experience
• Navigate to APM Service Inventory
• Click on Service Groups and try to create a group

Serverless

• Login with a user with Viewer role
• Navigate to Applications / Services, click on Service Groups and try to create a group

Possible solution

Do not show "Create group" button when capabilities.savedObjectsManagement.edit is false and provide a helpful message to users to contact an admin. The same should be done for update and delete operations.

[elasticmachine]

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)