Add docs for the new API keys provisioning role

[yetanothertw]

Summary

Closes #1260 Adds details about a new role that allows a member to generate workload credentials to the Elastic Cloud API keys page.

Reviewer SMEs: @/nathalie-tran and @/s-nel + @/alxchalkias

Generative AI disclosure

1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?

• Yes
• No

[github-actions]

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

• Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

[github-actions]

🔍 Preview links for changed docs

• deploy-manage/api-keys/elastic-cloud-api-keys.md
• deploy-manage/cross-project-search-config/cps-config-access-and-scope.md
• deploy-manage/users-roles/cloud-organization/manage-users.md
• deploy-manage/users-roles/cloud-organization/user-roles.md

[github-actions]

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

---

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

[yetanothertw]

Thanks @alxchalkias, I've updated the language to be slightly more generic wrt to workload credentials. It's ready for your review again.

[shainaraskas]

some thoughts on copy and positioning for you

[yetanothertw]

some thoughts on copy and positioning for you

Thank you, @shainaraskas -- much appreciated since all these concepts are so new to me. Please have another go at it when you get the chance.

[shainaraskas]

here, we need to say the person can allow the key to manage workload credentials (it's not a role) :)

(I think this is a thing)

[yetanothertw]

It's difficult to tell from the current designs (which cover the Invite members page/path), but I'd imagine a similar solution like toggling on an option to allow users to manage workload credentials would apply in this case.

I'll need to check this after feature freeze.

[shainaraskas]

fwiw I got asked for copy for this pathway

https://www.figma.com/design/3bjglWkjCHd0qSRRsXkGP7/API-key-self-management-for-non-org-owners?node-id=8037-9225&m=dev#1853182091

[yetanothertw]

Oh I totally misread that comment. Added ✅ Thank you!

[shainaraskas]

I think we are still relying too much on the existing structure of these pages - manage workload credentials is consistently slotted into role-related sections

[shainaraskas]

lgtm, thanks <3