zammad/app/policies/controllers/chat_sessions_controller_policy.rb

class Controllers::ChatSessionsControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('chat.agent')
end