provision_board_identity
Provision the organisation's board service principal - the acting identity platform-created agents (created_by 'system') act as when they work AI board tickets. Without it those agents are refused with 'no acting identity that can write' and designating them is refused too; provisioning is the fix that makes the organisation's designated board workers staffable on the next dispatcher cycle. Organisation administrators only. The optional role_slug narrows the principal's powers: 'operator' (the default day-2 operations profile), 'member', or 'viewer'; owner and admin are refused so no agent can hold organisation administration, and custom roles must be assigned from the roles page where their permissions are visible. Provisioning an organisation that already holds a live board identity is a no-op that reports the existing grant unchanged. Granting an identity that can change infrastructure is the same class of decision as giving a colleague the operator role, so this is confirmation-gated in chat. Stand the identity down from the portal's AI settings, which drops the principal to the viewer floor without deleting its audit trail.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role_slug | No | Built-in role the principal holds (default 'operator'). Owner and admin are never accepted. |