Privileges List

The table below lists privileges arranged according to access rights granted.

Internal System Privileges
NOBODY	Internal system privilege. Do not add it to any role.
Account Management Rights
ACCOUNTS_CREATE_MODIFY	Allows you to create new accounts and make some limited changes to existing accounts. You cannot change: Tax zone Credit limit Contact (Billing) Address Customer class (credit terms, statement cycle)
ACCOUNTS_MODIFY_TERMS	Extends the ACCOUNTS_CREATE_MODIFY privilege by allowing the user to change certain customer account information. You can change: Tax zone Credit limit Contact (Billing) Address Customer class (credit terms, statement cycle) Note: We recommend that you give the ACCOUNTS_MODIFY_TERMS privilege to users together with the ACCOUNTS_CREATE_MODIFY privilege.
ACCOUNTS_VIEW_DET	Allows viewing account details of customers.
Account Status Management Rights
ACCOUNTS_PUT_ON_AD_HOLD	Allows account managers to put accounts on administrative hold. Effective only if this privilege is also granted: ACCOUNTS_VIEW_DET
ACCOUNTS_PUT_ON_CR_HOLD	Allows account managers to put accounts on credit hold. Effective only if this privilege is also granted: ACCOUNTS_VIEW_DET
ACCOUNTS_RLS_AD_HOLD	Allows account managers to release accounts from administrative hold. Effective only if this privilege is also granted: ACCOUNTS_VIEW_DET
ACCOUNTS_RLS_CR_HOLD	Allows account managers to release accounts from credit hold. Effective only if this privilege is also granted: ACCOUNTS_VIEW_DET
ACCOUNTS_CANCEL	Allows account managers to cancel accounts. Effective only if these privileges are also granted: ACCOUNTS_VIEW_DET MANAGE_CUSTOMERS_SUBSCR MANAGE_OWN_DOMAINS (to be able to cancel domain subscriptions) MANAGE_OWN_DOMAINS_C (to be able to cancel domain subscriptions)
ACCOUNTS_ACTIVATE	Allows account managers to activate previously canceled accounts. Effective only if these privileges are also granted: ACCOUNTS_VIEW_DET MANAGE_CUSTOMERS_SUBSCR
AR documents Management Rights
ARDOCS_CREATE	Allows creating, releasing and applying new Payments, Debit and Credit memos. Does not allow processing Payments.
ARDOCS_REBUILD	Allows rebuilding the already generated documents manually: from the document itself, by clicking the button Rebuild Document, with preview and comparison of already existing and updated versions of PDF and HTML. Allows reviewing a versions history and comparing original and new versions (PDF and HTML) on the Versions tab.
ARDOCS_VIEW	Allows viewing Invoices, Debit and Credit Memos of customers.
ARDOCS_VIEW_C	Allows viewing own Invoices.
CREATE_MULTILINED_MEMO	Manages the Add New Debit Memo and Add New Credit Memo buttons display in the All Documents tab. Effective only if these privileges are also granted: ARDOCS_CREATE
CREATE_CORRECTING_MEMO	Allows users to create correcting Debit and Credit Memos for an open invoice. Effective only if these privileges are also granted: ARDOCS_CREATE
Miscellaneous Rights
APS_APPLICATION_ACCESS	Allows users to view and access APS applications from the Billing Provider Control Panel.
AUDIT	Allows viewing modification history of the visible entities.
PROCESS_TTS	Allows processing Trouble Tickets.
REPORTS_VIEW	Allows viewing Financial Reports.
ROLLBACK_VENDOR_PLAN	Allows to rollback to vendor's settings on a service plan.
KEY_CUSTODIAN	Allows managing Encryption Keys.
Notification Management Rights
COMMUNIC_MODIFY_SETTINGS	Allows creating/modifying Notification schedules, Limit Notifications and Distribution List's. User can activate/deactivate Message Templates, but can not modify them.
COMMUNIC_MODIFY_TEMPLATES	Allows viewing Notification Settings and creating/modifying Notification Templates.
COMMUNIC_VIEW_MSG_LOG	Allows viewing Message Log in System > Logs.
MANAGE_OWN_NOTOFICATIONS_C	Allows viewing own Notifications.
Configuration Rights
BUILTIN_SALES_PERSONS_VIEW_CONFIG	This privilege allows the user to view and configure Sales Persons and Sales Branches.
CONFIG_GLOBAL_SETTINGS	Allows configuring External Systems, E-Commerce Settings, Security Privileges, Currencies, Countries, Attachment Settings, Message Send Methods, IP Pools, Hosts, IP Addresses, Events, PDF Conversion Settings, and Trouble Tickets.
CONFIG_ECOMMERCE	Allows configuring Payment Gateways Settings. Also allows specifying Payment Gateways to be used to process various kinds of Payments.
CONFIG_EXTERNAL_SYSTEMS	Allows configuring external systems.
CONFIG_FRAUD_SCREENING	Allows configuring Fraud Screening.
CONFIG_IMPORT_VIEW	Allows to view import history and mapping table.
CONFIG_IMPORT_EXPORT_EXE	Allows to execute configuration import and export.
CONFIG_IMPORT_MAPPING_EDIT	Allows to edit mapping table.
CONFIG_MISC_ORDER_NUMB	Allows configuring document numbering.
CONFIG_ORDER_PROCESSING	Allows configuring Order Queues, and Order Processing.
CONFIG_SALES_FIN_SETINGS	Allows creating/modifying Taxes, Tax Categories, Attributes, Customer Classes and Statement Cycles.
CONFIG_SECURITY	Allows creating Roles, attaching/detaching Privileges to Roles, attaching/detaching Roles to Users. Allows managing Login Settings.
CONFIG_STORE	Allows configuring Online Store settings.
CONFIG_TTS	Allows configuring Trouble Ticket System.
Customer Rights
CUST_MAKE_PURCHASES	Allows placing Orders. This privilege must be assigned only to customers' users, not to provider's users.
CUST_PURCHASE_SERVICE	Allows purchasing Subscriptions.
CUST_REGISTER_DOMAIN	Allows purchasing Domains.
Management Rights
MANAGE_AFFILIATED_ACCOUNTS	This privilege is a reduced version of the CONFIG_SECURITY privilege. With this privilege the user can: View and/or edit the user's own profile data View the profile data of the other users of the same vendor Add or modify customer/sub-customer and reseller/sub-reseller users With this privilege (but without CONFIG_SECURITY) the user cannot: Edit the user's own roles or privileges Add other users for the vendor See or edit roles or privileges of the other users of the vendor
MANAGE_CUSTOMERS_SUBSCR	Allows the user to make certain changes to subscriptions. You can: View the list of subscriptions and details of individual subscriptions Place cancellation orders Change subscription periods Switch service plans Upgrade or downgrade resource limits Synchronize subscriptions with the service plan You cannot: Make changes allowed by the MANAGE_CUSTOMERS_SUB_TERMS privilege.
MANAGE_CUSTOMERS_SUB_TERMS	Extends the MANAGE_CUSTOMERS_SUBSCR privilege by allowing the user to change the terms of subscriptions. You can: Put subscriptions on administrative or credit hold Resume subscriptions from hold Note: This privilege influences on the `NotifySubscriptionHoldChanged` method. That is, the SUBSCRIPTION STOPPED (PUT ON CREDIT HOLD) notification is not displayed if one puts subscriptions on administrative or credit hold without this privilege, and vice versa: the notification remains displayed if one releases subscriptions from administrative or credit hold without this privilege. Change the subscription expiration date Change the subscription name, prices, service terms, billing period, next billing date, and auto-renewal settings Remove resources Edit resource prices and descriptions Note: We recommend that you give the MANAGE_CUSTOMERS_SUB_TERMS privilege to users together with the MANAGE_CUSTOMERS_SUBSCR privilege.
MANAGE_OWN_ACCTINFO	Allows modifying Account Information and Additional Info of the Account.
MANAGE_OWN_ACCTINFO_C	Allows end-user to modify Account Information and Additional Info of the Account.
MANAGE_OWN_DOMAINS	Allows registering, transferring and renewing domains.
MANAGE_OWN_DOMAINS_C	Allows end-user to register, transfer and renew domains.
MANAGE_OWN_FIN_INFO	Allows managing own payment methods.
MANAGE_OWN_FIN_INFO_C	Allows end-user to manage own payment methods.
MANAGE_OWN_SUBSCRS	Allows cancelling, renewing and upgrading Subscriptions.
MANAGE_OWN_SUBSCRS_C	Allows end-user to cancel, renew and upgrade Subscriptions.
MANAGE_OWN_SUBSCRS_RENEW_C	Allows renewing own Subscriptions.
MANAGE_RESELLERS_ORDERS	Allows processing reseller customer's Orders.
Order Processing Rights
ORDERS_CREATE	Allows the user to create orders. You cannot do the following: Create order adjustments Apply discounts Make refunds
ORDERS_ADJUST	Extends the ORDERS_CREATE privilege by allowing the user to make changes to the existing orders which have not been processed yet. You can: Create order adjustments Apply discounts Make refunds Note: We recommend that you give the ORDERS_ADJUST privilege to users together with the ORDERS_CREATE privilege.
ORDERS_PROCESS	Allows processing customer's Orders.
ORDERS_VIEW	Allows viewing customer's Orders.
ORDERS_VIEW_C	Allows viewing own Orders.
Payments Processing Rights
PAYMENT_METHODS_CREATE_MODIFY	Allows creating/modify customer's payment methods.
CC_VIEW_FIRST_LAST	Allows viewing 4 first and 4 last digits of a credit card number in cards listing. Privilege is applicable for provider, reseller, and customer control panel.
PAYMENTS_PROCESS	Allows only processing payments. (Does not allow creating or applying payments).
MANAGE_PAYMENT_METHODS_C	Allows viewing own payment methods.
Product Management Rights
PRODUCT_MANAG_CONFIGURE	Allows creating/modify service templates, unique groups, plan categories, sales categories, resources, resource categories and units of measure.
PRODUCT_MANAG_MARKETING	Allows creating/modifying discounts, promotions and campaigns.
PRODUCT_MANAG_MODIF_PLANS	Allows creating and modifying service plans.
PRODUCT_MANAG_VIEW_PLANS	Allows viewing service plan's details.
Provisioning Rights
PROVISIONING_MANUAL_OPS	This privilege allows the user to navigate to Operations > Provisioning and access custom provisioning queues. The user can access a particular provisioning queue when they have a role containing this privilege and associated with this queue. The privilege does not give access to the Manual Operations tab, which lists all the items pending manual provisioning. Note: This privilege gives access to the Manual Operations tab only for DUMMYGATE objects.
PROVISIONING_MANUAL_OPS_ALL	This privilege allows the user to access the Manual Operations tab on the provisioning screen and manage all the items pending manual provisioning.
PROVISIONING_GENERAL	This privilege is obsolete and left for backward compatibility.
PROVIDE_SUPPORT	This privilege is reserved for future functionality.