Hi Nanda,
interesting use case! A Clone involves create, so its hard to think that a user might be able to do this without a create permission. You might want to look at a button/workflow that would perform the clone async with the user creating the clone being a system account instead of the actual user. This has the downside of being difficult to trace who actually does it
------------------------------
Gino Fortunato
Principal Solution Engineer
Reltio
------------------------------