zammad/app/policies/controllers/roles_controller_policy.rb

class Controllers::RolesControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('admin.role')
end