Create the following plugin permissions  

view_advisor
edit_advisor
view_vulnerabilities
edit_vulnerabilities

• Make sure the default roles get the view and edit permissions here =>  https://github.com/jeremylenz/foreman_rh_cloud/blob/0c7ebb7b64a951f3ce2a25103c3da74c2abf8a25/lib/foreman_rh_cloud/plugin.rb#L75
• No per-host filtering for edit actions is acceptable
•