'Roles and capabilities', 'subtitle' => 'What a role may do lives here, not in a migration. Whoever holds the role gets it on their next request.', 'new_label' => 'New role', 'new_hint' => 'For example Accounting. Capabilities follow in its own card.', 'create' => 'Create role', 'created' => 'Role created.', 'delete' => 'Delete', 'deleted' => 'Role deleted.', 'saved' => 'Capabilities for :role saved.', 'locked_badge' => 'locked', 'your_role' => 'Your role', 'owner_locked' => 'Owner cannot be changed here. A click that takes capabilities from Owner locks you out of your own installation, and nobody could undo it.', 'in_use' => 'The role :role is still held. Whoever has it would be left with no role on their next sign-in and could not enter the console.', 'holders' => '{0} Nobody holds this role|{1} :count person holds this role|[2,*] :count people hold this role', 'granted_count' => ':granted of :total capabilities', 'can' => [ 'billing.manage' => 'Invoices, credit notes, payment problems', 'console.view' => 'Enter the console at all', 'customers.grant_plan' => 'Grant a plan without payment', 'customers.impersonate' => 'Sign in as a customer', 'customers.manage' => 'See and change customer data', 'datacenters.manage' => 'Manage datacenters', 'dpa.manage' => 'Data processing agreements', 'hosts.manage' => 'Create, onboard and remove hosts', 'instances.adminlogin' => 'Sign in to a customer cloud', 'instances.restart' => 'Restart a customer cloud', 'mail.manage' => 'Mailboxes, templates, inbox', 'maintenance.manage' => 'Maintenance windows and incidents', 'plans.manage' => 'Plans and prices', 'provisioning.cancel' => 'Cancel a running provisioning run', 'provisioning.retry' => 'Retry a provisioning run', 'secrets.manage' => 'Credentials and the server file', 'site.manage' => 'Company details, invoice series, hostnames', 'staff.manage' => 'Invite staff AND define roles', 'vpn.manage.all' => 'Everyone\'s VPN access', 'vpn.view.all' => 'See everyone\'s VPN access', ], ];