Awedesk user roles are layered on top of WordPress users. ALSP_User recognizes admin, manager, agent, and client role values in alsp_users. WordPress administrators are treated as Awedesk admins.

Capability inventory discovered from activation:

| Capability | | — | | alsp_agent | | alsp_agent_department | | alsp_app_push | | alsp_assign_ticket | | alsp_assign_ticket_creator | | alsp_attach_files | | alsp_close_ticket | | alsp_create_ticket | | alsp_csat_responses | | alsp_delete_other_ticket | | alsp_delete_private_ticket | | alsp_delete_reply | | alsp_delete_ticket | | alsp_demo | | alsp_departments | | alsp_edit_other_ticket | | alsp_edit_private_notes | | alsp_edit_private_ticket | | alsp_edit_ticket | | alsp_ep_spam_quarantine | | alsp_labels | | alsp_labels_assignments | | alsp_list_ticket | | alsp_lock_ticket | | alsp_log | | alsp_mail_queue | | alsp_mail_status_index | | alsp_mail_user_index | | alsp_manage_licenses | | alsp_manager | | alsp_mayfly | | alsp_multi_inbox | | alsp_multi_inbox_department_index | | alsp_notifications | | alsp_predefined_replies | | alsp_recent_tickets | | alsp_reopen_ticket | | alsp_reply_ticket | | alsp_settings_tickets | | alsp_staff_notes | | alsp_ticket_delete_agents | | alsp_ticket_delete_channels | | alsp_ticket_delete_departments | | alsp_ticket_delete_priorities | | alsp_ticket_delete_products | | alsp_ticket_delete_tags | | alsp_ticket_delete_ticket_type | | alsp_ticket_edit_agents | | alsp_ticket_edit_channels | | alsp_ticket_edit_departments | | alsp_ticket_edit_priorities | | alsp_ticket_edit_products | | alsp_ticket_edit_tags | | alsp_ticket_edit_ticket_type | | alsp_ticket_list_agents | | alsp_ticket_list_channels | | alsp_ticket_list_departments | | alsp_ticket_list_priorities | | alsp_ticket_list_products | | alsp_ticket_list_tags | | alsp_ticket_manage_agents | | alsp_ticket_manage_channels | | alsp_ticket_manage_departments | | alsp_ticket_manage_priorities | | alsp_ticket_manage_privacy | | alsp_ticket_manage_products | | alsp_ticket_manage_tags | | alsp_ticket_manage_ticket_templates | | alsp_ticket_manage_ticket_type | | alsp_ticket_messages | | alsp_ticket_preferences | | alsp_ticket_taxonomy | | alsp_tickets | | alsp_user_capabilities_agent | | alsp_user_capabilities_client | | alsp_user_capabilities_full | | alsp_user_preferences | | alsp_users | | alsp_view_all_tickets | | alsp_view_edd | | alsp_view_private_ticket | | alsp_view_ticket | | alsp_view_unassigned_tickets |

$user = ALSP_User::get_instance();

if (!$user->is_staff()) {
    return new WP_Error('my_forbidden', 'Staff access required.', ['status' => 403]);
}