It appears that there is no option in roles to disable the YAML button for roles that I want to create for readonly/view users.

The YAML button now exposes plain text passwords and accounts that we have configured in global or host parameters.

We want to use an LDAP authentication source with auto account creation in foreman but a user with a valid AD account is now able to see/view hosts (what we want) but also has access to the YAML button (what we don't want).