Currently, there is no RBAC on the discovery agent; we want users to be able to run the discovery but not create/edit/delete the discovery agent.

Please add this RBAC support on discovery.