Description of problem:

• When checking logs of the application logging tenant with a cluster-wide user, we're seeing transient (i.e. self healing, so the issue goes away after 30-60 seconds, without customer intervention) "Missing permissions to get logs" in the console.
• At a closer look, what we're seeing in the RHOCP console is {"error":"You don't have permission to access this tenant","errorType":"observatorium-api","status":"error"}...but we've so far only able to replicate this issue while querying logs from the console (direct query to the Loki gateway, through `logcli works just fine).

Version-Release number of selected component (if applicable):

• Openshift Logging version is 6.1.7
• COO v1.2.1

How reproducible:

• As per customer feedback, the issue is often seen right after logging the console and self-remediates after 30-60 seconds. However, we've seen the issue in at least 3 environments so far, the occurrence pattern is not always consistent.

Steps to Reproduce:

1. Log into the RHOCP console as a cluster-admin, navigate to Observe > Logs and display the application logs.
2. Notice the "Missing permissions to get logs" error
3. Wait 30-60 seconds the logs are displayed and from that moment everything seems OK.

Actual results:

1. Getting "Missing permissions to get logs" in the console.

Expected results:

1. Application logs to be displayed without transient errors.

Additional info:

1. We see no issue while querying the same application tenant through logcli
2. Nor we see the issue with anything other than a cluster-wide user (i.e. standard namespace `admin` queries work fine... which leads to suspect the issue may be related to the logging-view-plugin and potentially related to the changes introduced in 5.8 in LOG-3841 and LOG-4023