diff --git a/x-pack/plugins/apm/server/routes/fleet.ts b/x-pack/plugins/apm/server/routes/fleet.ts
index a01c9dd1579b..afe18b33c482 100644
--- a/x-pack/plugins/apm/server/routes/fleet.ts
+++ b/x-pack/plugins/apm/server/routes/fleet.ts
@@ -138,10 +138,12 @@ const getMigrationCheckRoute = createApmServerRoute({
     const fleetPluginStart = await plugins.fleet.start();
     const securityPluginStart = await plugins.security.start();
     const hasRequiredRole = isSuperuser({ securityPluginStart, request });
-    const cloudAgentPolicy = await getCloudAgentPolicy({
-      savedObjectsClient,
-      fleetPluginStart,
-    });
+    const cloudAgentPolicy = hasRequiredRole
+      ? await getCloudAgentPolicy({
+          savedObjectsClient,
+          fleetPluginStart,
+        })
+      : undefined;
     return {
       has_cloud_agent_policy: !!cloudAgentPolicy,
       has_cloud_apm_package_policy: !!getApmPackagePolicy(cloudAgentPolicy),