Jenkins Version: 2.164.1
Role Strategy Plugin Version: 2.10
I configured a role with all agent related permissions: Build, Configure, Connect, Disconnect...
With this role assigned to a user, that user can Configure the agent, but it can't run builds on it. The cause of blockage indicates it lacks permissions to run on this slave.
It is related with the authorization strategy implementing the getACL for Computer but not for Node. If implementing the ACL also for Node apparently works without issues.