feat: [UIE-10184] - IAM: add permissions to UI

[aaleksee-akamai]

Description 📝

This PR disables/enables UI for default roles and account delegations based on permissions.

Note: Delegate users also will be able to add/remove the delegate roles

Changes 🔄

List any change(s) relevant to the reviewer.

• Add permissions
• Update tests

Scope 🚢

Upon production release, changes in this PR will be visible to:

• All customers
• Some customers (e.g. in Beta or Limited Availability)
• No customers / Not applicable

How to test 🧪

Prerequisites

(How to setup test environment)

• use parent/child/delegate account

Verification steps

(How to verify changes)

• child/delegate account_admin and account_viewer should be able to view default roles and entities.
• child/delegate account_admin should be able to update default roles and entities.
• parent account_admin and account_viewer should be able to view account delegations.
• parent account_admin should be able to update account delegations.
• unauthorized users should see a notification banner in Account Delegations.

Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support

• I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

• All tests and CI checks are passing
• TypeScript compilation succeeded without errors
• Code passes all linting rules

[aaleksee-akamai]

we have a ticket for that UIE-10223, I've done it here in order to see that you've logged as a delegate user for testing purpose

However, I don't know why it was done for proxy users

[linode-gh-bot]

Cloud Manager UI test results

🔺 1 failing test on test run #4 ↗︎

❌ Failing	✅ Passing	↪️ Skipped	🕐 Duration
1 Failing	867 Passing	11 Skipped	35m 23s

Details

Failing Tests
	Spec	Test
❌	account-switching.spec.ts	Cloud Manager Cypress Tests→Parent/Child account switching→From Parent to Child » can search child accounts

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/parentChild/account-switching.spec.ts"

[mpolotsk-akamai]

Looks good to me. Tested parent/child with and without permissions. Everything works as expected. Thanks!

[abailly-akamai]

This looks great - thx @aaleksee-akamai

Although it's unlikely for this PR, due to the the recent regressions we encountered with the legacy experience we should triple down testing all cases.

[aaleksee-akamai]

This looks great - thx @aaleksee-akamai

Although it's unlikely for this PR, due to the the recent regressions we encountered with the legacy experience we should triple down testing all cases.

@abailly-akamai , I think we need to merge your PR into develop (after the release) and check if it helps