We have a requirement to create Read-Only Access Role in Pega so that users have a very limited access to locked environments (QAT, NFT,...). One of the sub-requirement is that users should be able to Trace the agents/requestors/listeners but should not be able to start/stop/terminate the same.

For agents, we have observed that all options (Start/Stop/Trace) are controlled by the privilege  pzSystemOperationsAdministrator. If this privilege is assigned to @baseclass, all options are enabled together, otherwise remain disabled.

One option to accomplish can be to override the FINAL OOTB section rule on System > Operations landing page (Agent Management tab) and customize the behavior by adjusting privileges. But is there any other way to accomplish the same without modifying the OOTB FINAL rules??

***Edited by Moderator Marissa to update Content Type from Question to Idea***