'READ' permission requires for custom security role required to create and edit detection rules for software delivery
The current user does not have required permission 'read' to load item 'xxx-xxx-xxx-xxx'
Some permissions are hidden by default. After set attribute to 0 for that item, and unhiding the 'Expression types' class, I was able to provide 'read' access for a custom security role.
SET Attributes = 0
WHERE Guid = 'place here GUID from the log' -- to unhide class Expression Types
From Console select Role Manager >Tasks>Software Management>Expression Types-check 'Read access' and Save.