AI Agent studio access cannot be separated from AI Agent Chat Interface access

Summary:

We have observed that AI Agent Studio access cannot currently be separated from AI Agent Chat Interface access.
When users are granted the required roles to access the AI Agent Chat Interface (for example, to interact with procurement AI agents for searching requisitions or purchase orders), those same roles also automatically grant access to AI Agent Studio.
As a result, users are able to access AI Agent Studio and make configuration changes, such as modifying the LLM settings and security configurations. Our expectation is that end users who only require the chat interface should not have access to these administrative or edit capabilities.