Non-admin user with view-hosts permission has the capability to click on add parameter button, though it doesn't save then too we have the option to delete it and then it pop's up with access denied.