# Ligbox OPS — Catálogo de Ações v1.1 (Spec 039)
# Aprovado Roger 2026-06-29

version: '1.1'
spec: 039-ligbox-ops-authorization-catalog
approved: '2026-06-29'
decisions_ref: spec.md §13
roles:
  super_admin:
    code: SU
    label: Super Admin
  ops_lead:
    code: CO
    label: Coordenador Ops
  technician:
    code: TEC
    label: Técnico
  noc:
    code: NOC
    label: NOC
  sales_admin:
    code: SAD
    label: Admin Comercial
  sales_support:
    code: SSU
    label: Suporte Comercial
  finance:
    code: FIN
    label: Financeiro
  marketing:
    code: MKT
    label: Marketing
  seo:
    code: SEO
    label: SEO
  developer:
    code: DEV
    label: Developer
  devops:
    code: DVO
    label: DevOps
  security_analyst:
    code: SOC
    label: Analista Segurança
  content_editor:
    code: CMS
    label: Editor Conteúdo
  agentic_operator:
    code: AIO
    label: Operador Agentes
  partner:
    code: PTR
    label: Partner / Revendedor
  api_service:
    code: SVC
    label: API Service
  agent_system:
    code: AGT
    label: Sistema Agentes
rbac_custom:
  inherits_from:
  - ops_lead
  - technician
access_levels:
  full:
    symbol: ✅
    label: Total
  approve:
    symbol: 🟡
    label: Com aprovação
  read:
    symbol: 🔒
    label: Leitura
  link:
    symbol: 🔗
    label: Deep-link
  api:
    symbol: ⚙️
    label: API/M2M
  system:
    symbol: 🤖
    label: Sistema
  none:
    symbol: ❌
    label: Negado
groups:
- id: desk-auth
  label: Controle de identidade
  surface: desk
- id: desk-ops
  label: Operação Desk
  surface: desk
- id: vm112
  label: Onboard / Domínios
  surface: vm112
- id: vm123-foss
  label: FOSSBilling
  surface: vm123_foss
- id: vm123-odoo
  label: Odoo
  surface: vm123_odoo
- id: vm123-openpanel
  label: OpenPanel
  surface: vm123_openpanel
- id: console
  label: Console
  surface: console
- id: agents
  label: Agentes IA
  surface: agents
actions:
- id: desk.auth.user.list
  group: desk-auth
  label: Listar utilizadores Desk
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.user.create
  group: desk-auth
  label: Criar utilizador directo
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  gap: true
- id: desk.auth.user.approve_registration
  group: desk-auth
  label: Aprovar pedido cadastro
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  api: POST /v1/auth/registration-requests/{id}/approve
- id: desk.auth.user.reject_registration
  group: desk-auth
  label: Rejeitar pedido cadastro
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.user.edit
  group: desk-auth
  label: Editar utilizador
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.user.freeze
  group: desk-auth
  label: Desactivar conta
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  why: SSU nunca
- id: desk.auth.user.password.reset
  group: desk-auth
  label: Reset senha admin
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.user.2fa.reset
  group: desk-auth
  label: Reset 2FA
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.modules.toggle
  group: desk-auth
  label: Toggle módulos Desk
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.role.create
  group: desk-auth
  label: Criar função RBAC custom
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  inherits_from:
  - ops_lead
  - technician
- id: desk.auth.role.clone
  group: desk-auth
  label: Clonar função RBAC
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.auth.role.freeze
  group: desk-auth
  label: Pausar função RBAC
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.ticket.list
  group: desk-ops
  label: Listar tickets
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: read
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.ticket.patch
  group: desk-ops
  label: Actualizar ticket
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.ticket.assign
  group: desk-ops
  label: Atribuir ticket
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.services.client.list
  group: desk-ops
  label: Listar clientes IaaS
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: read
    marketing: none
    seo: none
    developer: none
    devops: read
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.services.process.update
  group: desk-ops
  label: Actualizar processo onboard
  roles:
    super_admin: full
    ops_lead: full
    technician: read
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: api
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.purge.auth.generate
  group: desk-ops
  label: Gerar código purge
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.assist.takeover
  group: desk-ops
  label: Takeover wizard
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.billing.state.validate
  group: desk-ops
  label: Validar billing_state
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.audit.run
  group: desk-ops
  label: Executar audit tenant
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.crm.leads.read
  group: desk-ops
  label: Leads abandonados
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: full
    seo: full
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.migration.job.create
  group: desk-ops
  label: Criar job migração
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.infra.deploy
  group: desk-ops
  label: Deploy Desk
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: full
    devops: full
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: desk.partner.dashboard.read
  group: desk-ops
  label: Dashboard revendedor
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm112.domain.purge
  group: vm112
  label: Purge domínio
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: approve
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm112.purge.job.recover
  group: vm112
  label: Recuperar job purge
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: full
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm112.carbonio.block.release
  group: vm112
  label: Libertar ACCOUNT_EXISTS
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: api
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.client.create
  group: vm123-foss
  label: Criar cliente
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: api
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm123_foss.client.read
  group: vm123-foss
  label: Ler cliente
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: read
    api_service: none
    agent_system: none
- id: vm123_foss.client.update
  group: vm123-foss
  label: Actualizar cliente
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm123_foss.client.delete
  group: vm123-foss
  label: Apagar cliente
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.order.create
  group: vm123-foss
  label: Criar pedido
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm123_foss.order.read
  group: vm123-foss
  label: Ler pedidos
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: read
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: read
    api_service: none
    agent_system: none
- id: vm123_foss.invoice.create
  group: vm123-foss
  label: Criar fatura
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.invoice.read
  group: vm123-foss
  label: Ler faturas
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: read
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: read
    api_service: none
    agent_system: none
- id: vm123_foss.invoice.void
  group: vm123-foss
  label: Anular fatura
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.product.create
  group: vm123-foss
  label: Criar produto
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: none
    marketing: full
    seo: none
    developer: api
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.product.update
  group: vm123-foss
  label: Editar produto
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: none
    marketing: full
    seo: none
    developer: api
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.product.read
  group: vm123-foss
  label: Ler produtos
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: read
    finance: none
    marketing: full
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.service.manage
  group: vm123-foss
  label: Gerir serviços
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: api
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.staff.manage
  group: vm123-foss
  label: Gerir staff FOSS
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: api
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.support.ticket
  group: vm123-foss
  label: Tickets FOSS
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_foss.hosting.provision
  group: vm123-foss
  label: Provisionar OpenPanel
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: api
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm123_odoo.partner.read
  group: vm123-odoo
  label: Ler parceiro
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_odoo.partner.write
  group: vm123-odoo
  label: Editar parceiro
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_odoo.sale.order.create
  group: vm123-odoo
  label: Criar pedido venda
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_odoo.invoice.post
  group: vm123-odoo
  label: Publicar fatura
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_odoo.account.move.validate
  group: vm123-odoo
  label: Validar contabilidade
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: full
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_odoo.crm.lead.read
  group: vm123-odoo
  label: CRM leads
  roles:
    super_admin: none
    ops_lead: none
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: read
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_openpanel.site.create
  group: vm123-openpanel
  label: Criar site
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: full
    developer: none
    devops: full
    security_analyst: none
    content_editor: full
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: vm123_openpanel.site.delete
  group: vm123-openpanel
  label: Deletar instância
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  why: Roger SU+CO only
- id: vm123_openpanel.site.suspend
  group: vm123-openpanel
  label: Suspender hosting
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: full
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_openpanel.ssl.manage
  group: vm123-openpanel
  label: SSL
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: full
    developer: none
    devops: full
    security_analyst: none
    content_editor: full
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_openpanel.backup.restore
  group: vm123-openpanel
  label: Restaurar backup
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: full
    security_analyst: none
    content_editor: read
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
- id: vm123_openpanel.autologin.client
  group: vm123-openpanel
  label: Autologin cliente
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: full
    sales_support: full
    finance: none
    marketing: none
    seo: full
    developer: none
    devops: none
    security_analyst: none
    content_editor: full
    agentic_operator: none
    partner: full
    api_service: none
    agent_system: none
- id: console.case.create
  group: console
  label: Criar chamado
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: full
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  spec_ref: 019-ops-console
- id: console.case.assign
  group: console
  label: Assumir chamado
  roles:
    super_admin: full
    ops_lead: full
    technician: full
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: full
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  spec_ref: 019-ops-console
- id: console.runbook.execute
  group: console
  label: Executar runbook
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: approve
    content_editor: none
    agentic_operator: approve
    partner: none
    api_service: none
    agent_system: none
  spec_ref: 019-ops-console
- id: console.discover.search
  group: console
  label: Discover
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: full
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
  spec_ref: 019-ops-console
- id: desk.agent.runbook.approve
  group: agents
  label: Aprovar A7
  roles:
    super_admin: full
    ops_lead: full
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: full
    content_editor: none
    agentic_operator: full
    partner: none
    api_service: none
    agent_system: none
- id: desk.agent.binding.toggle
  group: agents
  label: Config agente×função
  roles:
    super_admin: full
    ops_lead: none
    technician: none
    noc: none
    sales_admin: none
    sales_support: none
    finance: none
    marketing: none
    seo: none
    developer: none
    devops: none
    security_analyst: none
    content_editor: none
    agentic_operator: none
    partner: none
    api_service: none
    agent_system: none
stats:
  action_count: 62