zammad/app/policies/controllers/webhooks_controller_policy.rb

class Controllers::WebhooksControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('admin.webhook')
end