Custom Roles users Cannot Access Agent Logs in Serverless

[opauloh]

Describe the bug

Users with custom roles, even with minimum read permissions, are unable to view agent logs in the Session Viewer. The UI fails to display the logs, although the API requests return the expected data.

Preconditions

1. Serverless environment.
2. User with custom minimum read permissions:
   • Elasticsearch Index Privileges: Includes * (Read).
   • Kibana Privileges: Security (Read).

To Reproduce

1. Log in to the Serverless environment with the custom role user.
2. Navigate to Fleet page and select an agent.
3. Observe that agent logs are not displayed.
4. Check the network requests to confirm that APIs are returning data.

Expected behavior

• Agent logs should be visible to users with appropriate read permissions.
• If additional permissions are required, the UI should inform the user accordingly.

Version

• Serverless build: 80725
• Kibana Commit: 0ed82309e22a7fc8ac067c1dbf2c378735f86855

[elasticmachine]

Pinging @elastic/kibana-cloud-security-posture (Team:Cloud Security)