Privileges List

The table below lists privileges arranged according to access rights granted.

Internal System Privileges

NOBODY

Internal system privilege. Do not add it to any role.

Account Management Rights
ACCOUNTS_CREATE_MODIFY

Allows you to create new accounts and make some limited changes to existing accounts.

You cannot change:

  • Tax zone
  • Credit limit
  • Contact (Billing) Address
  • Customer class (credit terms, statement cycle)
ACCOUNTS_MODIFY_TERMS

Extends the ACCOUNTS_CREATE_MODIFY privilege by allowing the user to change certain customer account information.

You can change:

  • Tax zone
  • Credit limit
  • Contact (Billing) Address
  • Customer class (credit terms, statement cycle)

Note: We recommend that you give the ACCOUNTS_MODIFY_TERMS privilege to users together with the ACCOUNTS_CREATE_MODIFY privilege.

ACCOUNTS_VIEW_DET

Allows viewing account details of customers.

Account Status Management Rights
ACCOUNTS_PUT_ON_AD_HOLD

Allows account managers to put accounts on administrative hold. Effective only if this privilege is also granted:

  • ACCOUNTS_VIEW_DET
ACCOUNTS_PUT_ON_CR_HOLD

Allows account managers to put accounts on credit hold. Effective only if this privilege is also granted:

  • ACCOUNTS_VIEW_DET
ACCOUNTS_RLS_AD_HOLD

Allows account managers to release accounts from administrative hold. Effective only if this privilege is also granted:

  • ACCOUNTS_VIEW_DET
ACCOUNTS_RLS_CR_HOLD

Allows account managers to release accounts from credit hold. Effective only if this privilege is also granted:

  • ACCOUNTS_VIEW_DET
ACCOUNTS_CANCEL

Allows account managers to cancel accounts. Effective only if these privileges are also granted:

  • ACCOUNTS_VIEW_DET
  • MANAGE_CUSTOMERS_SUBSCR
  • MANAGE_OWN_DOMAINS (to be able to cancel domain subscriptions)
  • MANAGE_OWN_DOMAINS_C (to be able to cancel domain subscriptions)
ACCOUNTS_ACTIVATE

Allows account managers to activate previously canceled accounts. Effective only if these privileges are also granted:

  • ACCOUNTS_VIEW_DET
  • MANAGE_CUSTOMERS_SUBSCR
AR documents Management Rights
ARDOCS_CREATE

Allows creating, releasing and applying new Payments, Debit and Credit memos. Does not allow processing Payments.

ARDOCS_REBUILD

Allows rebuilding the already generated documents manually:

  • from the document itself, by clicking the button Rebuild Document,
  • with preview and comparison of already existing and updated versions of PDF and HTML.

Allows reviewing a versions history and comparing original and new versions (PDF and HTML) on the Versions tab.

ARDOCS_VIEW

Allows viewing Invoices, Debit and Credit Memos of customers.

ARDOCS_VIEW_C

Allows viewing own Invoices.

CREATE_MULTILINED_MEMO

Manages the Add New Debit Memo and Add New Credit Memo buttons display in the All Documents tab. Effective only if these privileges are also granted:

  • ARDOCS_CREATE
CREATE_CORRECTING_MEMO

Allows users to create correcting Debit and Credit Memos for an open invoice. Effective only if these privileges are also granted:

  • ARDOCS_CREATE
Miscellaneous Rights
APS_APPLICATION_ACCESS

Allows users to view and access APS applications from the Billing Provider Control Panel.

AUDIT

Allows viewing modification history of the visible entities.

PROCESS_TTS

Allows processing Trouble Tickets.

REPORTS_VIEW

Allows viewing Financial Reports.

ROLLBACK_VENDOR_PLAN

Allows to rollback to vendor's settings on a service plan.

KEY_CUSTODIAN

Allows managing Encryption Keys.

Notification Management Rights
COMMUNIC_MODIFY_SETTINGS

Allows creating/modifying Notification schedules, Limit Notifications and Distribution List's. User can activate/deactivate Message Templates, but can not modify them.

COMMUNIC_MODIFY_TEMPLATES

Allows viewing Notification Settings and creating/modifying Notification Templates.

COMMUNIC_VIEW_MSG_LOG

Allows viewing Message Log in System > Logs.

MANAGE_OWN_NOTOFICATIONS_C

Allows viewing own Notifications.

Configuration Rights
BUILTIN_SALES_PERSONS_VIEW_CONFIG

This privilege allows the user to view and configure Sales Persons and Sales Branches.

CONFIG_GLOBAL_SETTINGS

Allows configuring External Systems, E-Commerce Settings, Security Privileges, Currencies, Countries, Attachment Settings, Message Send Methods, IP Pools, Hosts, IP Addresses, Events, PDF Conversion Settings, and Trouble Tickets.

CONFIG_ECOMMERCE

Allows configuring Payment Gateways Settings. Also allows specifying Payment Gateways to be used to process various kinds of Payments.

CONFIG_EXTERNAL_SYSTEMS

Allows configuring external systems.

CONFIG_FRAUD_SCREENING

Allows configuring Fraud Screening.

CONFIG_IMPORT_VIEW

Allows to view import history and mapping table.

CONFIG_IMPORT_EXPORT_EXE

Allows to execute configuration import and export.

CONFIG_IMPORT_MAPPING_EDIT

Allows to edit mapping table.

CONFIG_MISC_ORDER_NUMB

Allows configuring document numbering.

CONFIG_ORDER_PROCESSING

Allows configuring Order Queues, and Order Processing.

CONFIG_SALES_FIN_SETINGS

Allows creating/modifying Taxes, Tax Categories, Attributes, Customer Classes and Statement Cycles.

CONFIG_SECURITY

Allows creating Roles, attaching/detaching Privileges to Roles, attaching/detaching Roles to Users. Allows managing Login Settings.

CONFIG_STORE

Allows configuring store settings.

CONFIG_TTS

Allows configuring Trouble Ticket System.

Customer Rights
CUST_MAKE_PURCHASES

Allows placing Orders. This privilege must be assigned only to customers' users, not to provider's users.

CUST_PURCHASE_SERVICE

Allows purchasing Subscriptions.

CUST_REGISTER_DOMAIN

Allows purchasing Domains.

Management Rights
MANAGE_AFFILIATED_ACCOUNTS

This privilege is a reduced version of the CONFIG_SECURITY privilege.

With this privilege the user can:

  • View and/or edit the user's own profile data
  • View the profile data of the other users of the same vendor
  • Add or modify customer/sub-customer and reseller/sub-reseller users

With this privilege (but without CONFIG_SECURITY) the user cannot:

  • Edit the user's own roles or privileges
  • Add other users for the vendor
  • See or edit roles or privileges of the other users of the vendor
MANAGE_CUSTOMERS_SUBSCR

Allows the user to make certain changes to subscriptions.

You can:

  • View the list of subscriptions and details of individual subscriptions
  • Place cancellation orders
  • Change subscription periods
  • Switch service plans
  • Upgrade or downgrade resource limits
  • Synchronize subscriptions with the service plan

You cannot:

  • Make changes allowed by the MANAGE_CUSTOMERS_SUB_TERMS privilege.
MANAGE_CUSTOMERS_SUB_TERMS

Extends the MANAGE_CUSTOMERS_SUBSCR privilege by allowing the user to change the terms of subscriptions.

You can:

  • Put subscriptions on administrative or credit hold
  • Resume subscriptions from hold

    Note: This privilege influences on the NotifySubscriptionHoldChanged method. That is, the SUBSCRIPTION STOPPED (PUT ON CREDIT HOLD) notification is not displayed if one puts subscriptions on administrative or credit hold without this privilege, and vice versa: the notification remains displayed if one releases subscriptions from administrative or credit hold without this privilege.

  • Change the subscription expiration date
  • Change the subscription name, prices, service terms, billing period, next billing date, and auto-renewal settings
  • Remove resources
  • Edit resource prices and descriptions

Note: We recommend that you give the MANAGE_CUSTOMERS_SUB_TERMS privilege to users together with the MANAGE_CUSTOMERS_SUBSCR privilege.

MANAGE_OWN_ACCTINFO

Allows modifying Account Information and Additional Info of the Account.

MANAGE_OWN_ACCTINFO_C

Allows end-user to modify Account Information and Additional Info of the Account.

MANAGE_OWN_DOMAINS

Allows registering, transferring and renewing domains.

MANAGE_OWN_DOMAINS_C

Allows end-user to register, transfer and renew domains.

MANAGE_OWN_FIN_INFO

Allows managing own payment methods.

MANAGE_OWN_FIN_INFO_C

Allows end-user to manage own payment methods.

MANAGE_OWN_SUBSCRS

Allows cancelling, renewing and upgrading Subscriptions.

MANAGE_OWN_SUBSCRS_C

Allows end-user to cancel, renew and upgrade Subscriptions.

MANAGE_OWN_SUBSCRS_RENEW_C

Allows renewing own Subscriptions.

MANAGE_RESELLERS_ORDERS

Allows processing reseller customer's Orders.

Order Processing Rights
ORDERS_CREATE

Allows the user to create orders.

You cannot do the following:

  • Create order adjustments
  • Apply discounts
  • Make refunds
ORDERS_ADJUST

Extends the ORDERS_CREATE privilege by allowing the user to make changes to the existing orders which have not been processed yet.

You can:

  • Create order adjustments
  • Apply discounts
  • Make refunds

Note: We recommend that you give the ORDERS_ADJUST privilege to users together with the ORDERS_CREATE privilege.

ORDERS_PROCESS

Allows processing customer's Orders.

ORDERS_VIEW

Allows viewing customer's Orders.

ORDERS_VIEW_C

Allows viewing own Orders.

Payments Processing Rights
PAYMENT_METHODS_CREATE_MODIFY

Allows creating/modify customer's payment methods.

CC_VIEW_FIRST_LAST

Allows viewing 4 first and 4 last digits of a credit card number in cards listing. Privilege is applicable for provider, reseller, and customer control panel.

PAYMENTS_PROCESS

Allows only processing payments. (Does not allow creating or applying payments).

MANAGE_PAYMENT_METHODS_C

Allows viewing own payment methods.

Product Management Rights
PRODUCT_MANAG_CONFIGURE

Allows creating/modify service templates, unique groups, plan categories, sales categories, resources, resource categories and units of measure.

PRODUCT_MANAG_MARKETING

Allows creating/modifying discounts, promotions and campaigns.

PRODUCT_MANAG_MODIF_PLANS

Allows creating and modifying service plans.

PRODUCT_MANAG_VIEW_PLANS

Allows viewing service plan's details.

Provisioning Rights
PROVISIONING_MANUAL_OPS

This privilege allows the user to navigate to Operations > Provisioning and access custom provisioning queues. The user can access a particular provisioning queue when they have a role containing this privilege and associated with this queue. The privilege does not give access to the Manual Operations tab, which lists all the items pending manual provisioning.

PROVISIONING_MANUAL_OPS_ALL

This privilege allows the user to access the Manual Operations tab on the provisioning screen and manage all the items pending manual provisioning.

PROVISIONING_GENERAL

This privilege is obsolete and left for backward compatibility.

PROVIDE_SUPPORT

This privilege is reserved for future functionality.

CloudBlue, an Ingram Micro business, uses cookies to improve the usability of our site. By continuing to use this site and/or logging in you are accepting the use of these cookies. For more information, visit our Privacy Policy.