Add a restricted default Agent role

The current default Agent role includes permissions that are not required for regular call center agents.

As a result, customers often need to create a separate custom role to restrict agent access.

The default Agent role currently provides access to areas such as:

• team dashboard / team statistics;

• broader analytics;

• team information;

• EnderGPT.

For a regular agent, the expected access scope is usually limited to their own data and training functionality.

Required Changes

Add a new default Agent role with restricted permissions.

New default role: Agent

The role should provide access only to:

• the agent's own dashboard and statistics;

• the agent's own conversations;

• training functionality available to the agent.

The role should not provide access to:

• team dashboard or team-level statistics;

• other agents' data;

• general analytics;

• team management / team overview;

• EnderGPT configuration or other administrative functionality.

Existing Agent Role

The current Agent role should remain available to avoid affecting existing users and role assignments.

Rename it to something that clearly indicates broader permissions, for example:

Agent (Extended Access)

Existing users assigned to this role should keep their current permissions after the change.

Expected Behavior

• New customers can assign a standard Agent role without creating a custom restricted role.

• Agents with the new role can access only their own statistics, conversations, and training.

• Team-level and administrative data is not available to the restricted Agent role.

• The existing Agent role remains available with its current permission set.

• Existing role assignments are not changed automatically.

Acceptance Criteria

1. A new default Agent role with restricted permissions is available.

2. The role provides access to the agent's own dashboard/statistics.

3. The role provides access to the agent's own conversations.

4. The role provides access to available training functionality.

5. The role does not provide access to team-level dashboards or analytics.

6. The role does not provide access to other agents' data.

7. The existing Agent role remains available with the same permissions as before.

8. Existing users do not lose or gain permissions automatically after the new role is introduced.

9. The existing broader role is renamed to clearly distinguish it from the restricted Agent role.

   Origin