[RAM] Can not view the rule created in ML in rule stack management

[XavierM]

If users only have the ML privileges and not stackRules privileges. Then, user can create an anomaly rule in the jobs table but won't be able to view/edit/delete this rule in stack management.

[elasticmachine]

Pinging @elastic/response-ops (Team:ResponseOps)

[elasticmachine]

Pinging @elastic/ml-ui (:ml)

[umbopepato]

In this case the Management > Stack rules permission is not granted and therefore the management.insightsAndAlerting.triggersActions capability, responsible for showing the Management > Rules page, is off:

Should the ML permission also automatically grant the triggersActions capability then?

Detecting an "override" in rules capabilities in specific pages (perhaps checking the ml.canCreateMlAlerts capability?) shouldn't be a problem, but the activation logic for the management sections is tightly coupled to their respective capabilities so detecting an override there would be more complicated:

kibana/src/plugins/management/public/management_sections_service.ts

Lines 72 to 86 in 3730dd0

	start({ capabilities }: SectionsServiceStartDeps) {
	this.getAllSections().forEach((section) => {
	if (capabilities.management.hasOwnProperty(section.id)) {
	const sectionCapabilities = capabilities.management[section.id];
	section.apps.forEach((app) => {
	const capabilitiesId = app.capabilitiesId || app.id;
	if (
	sectionCapabilities.hasOwnProperty(capabilitiesId) &&
	sectionCapabilities[capabilitiesId] !== true
	) {
	app.disable();
	}
	});
	}
	});