General

Description of roles

User roles	Description
User Administrator	This user role gives permission to see and manage users under "Users" menu option. This includes view, create, edit, suspend and delete..
Merchant Management	This user role gives permission to see and manage the organization under "Oganization" menu option. This includes view organization, view, create and edit merchant..
Domain Insight	This user role is hidden from the portal and automatically set. It only contains one scope to view the portal dashboard and "Product Domains" menu option, where the products in which the user has any roles in are displayed. If no roles are set for the user in product portals, the dashboard does not display any products. It thus serves as an entry point to other portals.

Detailed permissions

Permissions	User Administrator	Merchant Management	Domain Insight
View the portal dashboard. Product portals in which the user has any roles under will appear here.	✅	✅	✅
View users	✅	✖️	✖️
Manage users	✅	✖️	✖️
View user activity	✅	✖️	✖️
View the organization	✖️	✅	✖️
Manage the organization	✖️	✅	✖️

Payment Acceptance & TMS

Description of roles

User roles	Descriptions
Merchant administrator	This user role gives permission to almost everything, including managing users, merchant information, and product configurations. But the adminstrator cannot perform operational tasks, such as refund/cancel tranasctions, activated/deactivate terminals.
Merchant insight	A read-only role that enables the user to view various information of its own organization or organizations below its organization tree. Aka, child organizations. Users with this role can view transactions, orgnaization information, reports, and users within its organization. But it does not have any permission to perform any operations.
Merchant support	This is a support role for people who need to manage the transaction lifecycles. This role gives permission to search& view transactioms, and perform actions (capture, void, and refund) on transactions, view&download reports.
Developer	This role is intended for developers who integrate with the platform’s APIs and build payment-related solutions. Users with this role can access API credentials, developer documentation, integration settings, and technical logs.
Field service engineer	This role is for people who needs to install, activate/deactivate and swap terminals.
1st line support	This role is intended for customer support agents who provide first-line assistance to merchants. Users with this role can search and view transactions, review merchant and terminal information, and assist merchants with basic inquiries. This role has limited operational permissions and cannot perform sensitive actions such as refunds, cancellations, or configuration changes.
Financial controller	This role is for finance personnel who need access to financial data and reporting. Users with this role can view and download transactions, settlements, payouts, and financial reports. This role is typically used for accounting and financial oversight and does not allow operational actions on transactions or system configuration changes.
Warehouse Technical	This role is for personnel responsible for preparing and handling payment terminals. Users with this role can register terminals, assign or unassign terminals to merchants, and manage terminal inventory. This role does not have permission to perform transaction operations or change merchant configurations.

Detailed Permissions

Permissions	Merchant Administrator	Merchant insight	Merchant support	Developer	Field service engineer	1st line support	Financial Controller	Warehouse Technical
View transaction details	✅	✅	✅	✖️	✖️	✅	✖️	✖️
Refund/capture/cancel transactions	✖️	✖️	✅	✖️	✖️	✖️	✖️	✖️
View & download reports	✅	✅	✅	✖️	✖️	✖️	✅	✖️
Request customized reports	✅	✖️	✅	✖️	✖️	✖️	✅	✖️
View in-store configuration package	✅	✅	✅	✖️	✖️	✅	✅	✖️
Edit in-store configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Create new in-store configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Delete in-store configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
View Global configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Edit Global configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Create new Global configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Delete Global configuration package	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Assign configuration package to sub-entities	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Order a terminal	✅	✖️	✖️	✖️	✅	✖️	✖️	✖️
Order a new acquiring agreement	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
Activate a terminal	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Deactivate a terminal	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Delete a terminal	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Swap a terminal and add reasons for swap	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Manage / Upload SN	✖️	✖️	✖️	✖️	✖️	✖️	✖️	✅
Search SN in RMA	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Read Active RMAs	✅	✖️	✖️	✖️	✅	✖️	✖️	✅
Create RMA	✖️	✖️	✖️	✖️	✅	✖️	✖️	✅
Read completed RMAs	✖️	✖️	✖️	✖️	✖️	✖️	✖️	✅
Complete a RMA	✖️	✖️	✖️	✖️	✖️	✖️	✖️	✅
Read terminal health data	✅	✅	✅	✖️	✅	✅	✖️	✅
Update a terminal in THS	✖️	✖️	✖️	✖️	✖️	✖️	✖️	✅
PA – Insights	✅	✅	✅	✖️	✖️	✅	✖️	✖️
PA – Transactions	✅	✅	✅	✖️	✅	✅	✖️	✖️
PA – Global Configuration	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
PA – Merchant Configuration	✅	✅	✅	✖️	✖️	✅	✖️	✖️
PA – Reports	✅	✅	✅	✖️	✖️	✖️	✅	✖️
PA – Agreement	✅	✖️	✖️	✖️	✖️	✖️	✖️	✖️
TMS – Dashboard	✅	✅	✅	✖️	✅	✅	✖️	✅
TMS – RMA	✅	✖️	✖️	✖️	✅	✅	✖️	✅
TMS – TEM	✅	✅	✅	✖️	✅	✖️	✖️	✅
TMS – Serial Numbers	✖️	✖️	✖️	✖️	✖️	✖️	✖️	✅