Add Signage Player Manager Role for Player-Scoped CMS Access

Description: As an IT Admin, I want a dedicated Player Manager role so that I can be granted full access to players, player groups, and device management without receiving edit access to content, layouts, playlists, or other CMS areas.

Notes and Dependencies:

• Follows the structural pattern of the Signage Media Manager role: full access within a defined area, read/preview access elsewhere, combinable with other Signage roles on the same user account.

• Scoped to Signage CMS only.

• Respects existing player group / user group RBAC - users only see and manage players within groups they are assigned to.

• Delete Player Groups is out of scope for this role.

• Full ADM access is in scope, including device-level actions such as reboot, screenshot capture, and status checks.

• Role must be exposed via Korbyt API user management endpoints so it can be assigned programmatically.

• New role option must appear in the Signage tab on the User create and edit screens alongside existing role types.

• Reports access is read-only (Access and View), consistent with how other scoped roles handle reporting.

• If User Management screens are part of a separate React rebuild workstream, UI changes for role selection should be tracked in that story instead.

Acceptance Criteria:

Scenario: Player Manager role is available for assignment Given a Tenant Admin or Administrator is on the User create or edit screen When they navigate to the Signage tab Then Player Manager appears as a selectable role option alongside existing Signage role types

Scenario: Player Manager has full access to players and player groups Given a user is assigned the Player Manager role When they access the Signage CMS Then they can view, provision, edit, and remove players And they can create and edit player groups But they cannot delete player groups And their access is scoped to player groups they are assigned to via existing user group RBAC

Scenario: Player Manager has full ADM access Given a user is assigned the Player Manager role When they access Advanced Device Management Then they can perform all device-level actions including reboot, screenshot capture, and status checks And their ADM access is scoped to players within their assigned player groups

Scenario: Player Manager has read-only access outside players and ADM Given a user is assigned the Player Manager role When they navigate to Media Manager, Layouts, Playlists, or other Signage sections Then they can view and preview content in those areas But they cannot create, edit, delete, or publish anything in those areas

Scenario: Player Manager cannot access administrative functions Given a user is assigned the Player Manager role When they are in the Signage CMS Then they do not have access to user management, tenant settings, or folder permission controls

Scenario: Player Manager can view reports Given a user is assigned the Player Manager role When they navigate to Reports and Analytics Then they can access and view reports But they cannot modify report configurations

Scenario: Player Manager role is combinable with other Signage roles Given a Tenant Admin is assigning roles to a user on the Signage tab When they select Player Manager Then it can be selected in combination with other Signage roles such as Media Manager on the same account