Enable custom agents for Guests at top level group

Katherine Richardsrequested to merge
kr/enable-group-level-custom-agents-for-guests into master

What does this MR do and why?

Enable custom agents for Guests at top level group namespace

Changes the read_ai_catalog_item_consumer permission in GroupPolicy from Developer to Guest access level to enable foreground execution of custom agents at the top-level group

EE: true Changelog: changed

Documentation MR:

References

Screenshots or screen recordings

Before After
Screenshot_2025-12-11_at_5.53.41_PM Screenshot_2025-12-11_at_5.51.41_PM

How to set up and validate locally

  1. Check out this branch
  2. Start GDK
  3. Navigate to a group with DAP enabled, such as http://gdk.test:3000/gitlab-duo
  4. Open Agentic Chat
    1. Verify for a Guest with a Duo seat assignment
      1. Custom Agents are additionally listed in the Agents dropdown
      2. the Guest can use a Custom Agent with Agentic chat
  5. Verify for any other roles (Planner+)
    1. Custom Agents are additionally listed in the Agents dropdown and can be used for chat

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Katherine Richards

Merge request reports