The DeleteEntry permission that is defined by the jobconfighistory plugin is scoped to Jenkins. This makes is impossible to grant this permission in matrix auth plugin on individual items or on agents