feat(rodco-buy): add IT profile permissions