Investigate BCROS staff account types

[seeker25]

Investigate BCROS staff account types

https://www.github.com/bcgov/entity/issues/16790

Other various keycloak roles in AUTH - frontend and backend:

There's an entire list of them, I think Patty has them somewhere - if not keycloak

STAFF permissions (STAFF via KEYCLOAK, without added roles):

Users don't usually have STAFF and ACCOUNT_HOLDER or GOVN_ACCOUNT_HOLDER roles at the same time.
It's either STAFF or ACCOUNT_HOLDER/GOVN_ACCOUNT_HOLDER role.

Also note staff/admin group is usually given out which is admin_view, edit, make_payment, manage_accounts, suspend_accounts, view_accounts

AUTH-WEB / AUTH-API
Have their own ORG type available via keycloak, users are added to this ORG if they have the STAFF role in keycloak
Have their own staff business dashboard
Can affiliate to their business dashboard without putting in phone or email, or business information
Can view other org's dashboards / transactions etc.
Affiliation Invitations (magic link and RTR's piece)
Approve org creations and membership invitations
Allow authorizations by only business identifier if STAFF
Get activities (ACCOUNT_HOLDERS can do this as well)
Get organization api keys
Delete organization api keys
Change org product subscriptions
Org search
Delete Org
Manage affiliations for any org ( need manage_business role), delete, create etc
Get affidavits
Approve / deny tasks etc
Search by username
Delete OTP
Hide staff name in activity log
Show full list of affiliation invitations if Staff
Manage memberships to orgs

BUSINESS-SEARCH:
STAFF have their own fee codes

BUSINESS-CREATE-UI:
Shows staff dashboard as breadcrumb
Can set completing party in a filing
Can set certify section in a filing
Can change mailing address / email in completing party
No min start date for registrations for staff
Shows completing party role if is person and current user is staff
Document delivery for staff optional email
Registration, can be no more than 90 days in the future
Staff payment options

BUSINESS-EDIT-UI:
Shows staff dashboard as breadcrumb
Can edit completing party in a filing
Can edit certify section in a filing
Document delivery for staff optional email
Business Start Date - doesn't look like many restrictions?
Folio number is hidden from staff
Staff payment options
Staff only corrections

BUSINESS-FILINGS-UI:
Shows staff dashboard as breadcrumb
New Conversion (Staff only)
Freeze/unfreeze
Put back on
Administrative Dissolution
Court Order
Registrar Order
Registrar Notation
Various others.. too many to list (Allowable filings)
https://github.com/bcgov/lear/blob/d98dd8576b7ee10b2feb7f0e90a20665a3bbcbad/legal-api/src/legal_api/services/authz.py#L116

LEAR:
Redact submitter?
https://github.com/bcgov/lear/blob/d98dd8576b7ee10b2feb7f0e90a20665a3bbcbad/legal-api/src/legal_api/services/authz.py#L116

NAMEX/NameRequest:
Not too much extra for NAMEX
Name Request - Submitting party name
Has Staff payment tab
Can confirm/renew/resubmit/upgrade NR's without restrictions (validations)
Staff dashboard bread crumb
Don't have folio number show up in certain components

PAY:
STAFF can choose their payment type, can be FAS, BCOL, No Fee.
STAFF can affect BCOL to make it applied charge, it also affects which BCOL fee code is selected
STAFF can waive fees in the payload
STAFF with create_credits can create credits (unused I think)

PPR/MHR:
Affects search results
Might have more details ask Doug

External Partner Applications:
Untested

SBC_STAFF permissions:

AUTH-WEB:
Have their own ORG type available via AUTH-WEB invitation
Have their own business dashboard
Can affiliate to their business dashboard without putting in phone or email, or business information
Affiliation Invitations (magic link and RTR's piece) <-- new

BUSINESS-CREATE-UI:
Shows staff dashboard as breadcrumb
Can set completing party in a filing
Can set certify section in a filing
Can change mailing address / email in completing party

BUSINESS-EDIT-UI:
Can edit completing party in a filing
Can edit certify section in a filing

BUSINESS-FILINGS-UI:
Nothing special

NAMEX/NameRequest:
Nothing special

PAY:
They pay via EJV, their org has billable false which skips any disbursement or payment and further processing - I believe for NRO for example it isn't supposed to prompt SBC_STAFF for funds.

PPR/MHR:
It looks like SBC_STAFF has certain STAFF FILING codes when paying

External Partner Applications:
Untested

[seeker25]

Let me know if you need more details @pstemkens