<?php

return [
    'title' => 'Roles and capabilities',
    'subtitle' => 'What a role may do lives here, not in a migration. Whoever holds the role gets it on their next request.',
    'new_label' => 'New role',
    'new_hint' => 'For example Accounting. Capabilities follow in its own card.',
    'create' => 'Create role',
    'created' => 'Role created.',
    'delete' => 'Delete',
    'deleted' => 'Role deleted.',
    'saved' => 'Capabilities for :role saved.',
    'locked_badge' => 'locked',
    'your_role' => 'Your role',
    'owner_locked' => 'Owner cannot be changed here. A click that takes capabilities from Owner locks you out of your own installation, and nobody could undo it.',
    'in_use' => 'The role :role is still held. Whoever has it would be left with no role on their next sign-in and could not enter the console.',
    'holders' => '{0} Nobody holds this role|{1} :count person holds this role|[2,*] :count people hold this role',

    'granted_count' => ':granted of :total capabilities',

    'can' => [
        'billing.manage' => 'Invoices, credit notes, payment problems',
        'console.view' => 'Enter the console at all',
        'customers.grant_plan' => 'Grant a plan without payment',
        'customers.impersonate' => 'Sign in as a customer',
        'customers.manage' => 'See and change customer data',
        'datacenters.manage' => 'Manage datacenters',
        'dpa.manage' => 'Data processing agreements',
        'hosts.manage' => 'Create, onboard and remove hosts',
        'server.terminal' => 'Root session on the CluPilot server itself — full access to the whole installation',
        'instances.adminlogin' => 'Sign in to a customer cloud',
        'instances.manage' => 'See and lift security blocks on a customer instance',
        'instances.restart' => 'Restart a customer cloud',
        'mail.manage' => 'Mailboxes, templates, inbox',
        'maintenance.manage' => 'Maintenance windows and incidents',
        'plans.manage' => 'Plans and prices',
        'provisioning.cancel' => 'Cancel a running provisioning run',
        'provisioning.retry' => 'Retry a provisioning run',
        'secrets.manage' => 'Credentials and the server file',
        'site.manage' => 'Company details, invoice series, hostnames',
        'staff.manage' => 'Invite staff AND define roles',
        'vpn.manage.all' => 'Everyone\'s VPN access',
        'vpn.view.all' => 'See everyone\'s VPN access',
    ],
];
