User roles are sets of permissions that determine what the user can do in the Customer Area, such as whether they can look up payments, configure risk settings, or download financial reports. Each user can have one or more roles, depending on the tasks they need to perform.
When you first sign up for Adyen, you get an admin user with the most common roles assigned to it, including the Merchant admin role. As the admin user, you can then create new users for other people in your organization.
The admin user can only give out roles that they themselves have. This prevents users from giving out unwarranted permissions, helping to keep your account safe.
If you need to assign a role that neither you nor your admin have, reach out to our Support Team.
Manage user roles
The following sections describe the user roles grouped by category:
- Account
- Developer
- Finance
- Financial products
- General
- In-person payments (POS)
- Online payments
- Partners
- Platforms
- Risk
- Transactions
- Classic platforms
Account
The following roles allow you to create and manage account-related permissions:
| Role | Permissions |
|---|---|
| Change payment methods | The user can request new payment methods, activate or deactivate payment methods, and configure how payment methods are rendered in your checkout. |
| Manage Merchant Account Groups role | The user can view and manage account groups. This role must be combined with company-level access. |
| Merchant additional merchant accounts | The user can request new merchant accounts. |
| Merchant application form | The user can change and upload application forms for new merchant accounts, without seeing information about other accounts under the same company. |
| Merchant review | The user can view active merchant review processes for current account. |
| Merchant user management | The user can create and edit users, and give out all roles and account access that they themselves have. |
| Manage account support tickets | The user can view and manage all of the support tickets created from the accounts that they have access to. |
Developer
The following roles allow you to create and manage permissions for APIs, webhooks, and test cards:
| Role | Permissions |
|---|---|
| Manage API credentials | The user has full API credential management permissions, including generating an API key. |
| Manage test cards | The user can view, create, and delete test cards for making test payments. |
| Merchant technical integrator | The user can manage webhooks, and API URLs. |
Finance
The following roles allow you to create and manage financial-related permissions, such as reports and invoices:
| Role | Permissions |
|---|---|
| Change payout schedule | The user can modify payout schedule settings. |
| Manage received invoices (Debtor) | The user can view invoices submitted by the Adyen payments platform. |
| Manage submitted invoices (Creditor) | The user can view, add, or edit invoices submitted by the merchant, and view MPL forecast reports. |
| Merchant financial | The user can view all payment, payout, and Revenue Accelerate information, including the Adyen deposit. The user can also view and subscribe to generic reports and the conversion, external settlement, and 3D Secure conversion reports. Combined with the Merchant admin role, the Merchant financial role also gives permissions to manage the Reserve. |
| Merchant manage bank accounts | The user can manage bank accounts for receiving payouts from Adyen. |
| Merchant View Reconciliation role | The user can view the reconciliation status for the account, as well as associated reports such as the forecast report. |
| See external settlement reports | The user can view the external settlement detail report. |
| See installment reports | The user can view the installments finance reports. |
Financial products
The following roles allow you to manage your financial products:
| Role | Financial products | Permissions | |
|---|---|---|---|
| Capital base role | Adyen Capital | The user can view capital grants and grant details. | |
| Manage issuing disputes | Adyen Issuing | The user can open disputes for payments made with Adyen-issued cards. To use this role, the user must also have the Balance platform base role. | |
| Manage transaction rules | Adyen Issuing | The user can create and manage transaction rules for Adyen-issued cards, business accounts, and other types of outgoing transfers. To use this role, the user must also have the Balance platform base role. | |
| Update card status | Adyen Issuing | The user can change the status of a card. To use this role, the user must also have the Balance platform base role. | |
| View payment instrument PII | Adyen Issuing, Adyen Business accounts | For Adyen Issuing, the user can view Personally Identifiable Information (PII) in the delivery details for a physical card issued to an individual. For Adyen Business accounts, the user can view the IBAN of an Adyen issued bank account, if it belongs to a sole proprietorship. To use this role, the user must also have the Balance platform base role. |
General
The following roles allow you to create and manage resources in your Customer Area:
Role |
Permissions |
|---|---|
| Download reports | The user can download all reports. |
| Generate reports | The user can download and generate all reports. |
| Merchant admin | The merchant admin has extensive permissions for accounts, reports, and risk, including full API key and user role management. This user can manage account settings, payment methods, risk configurations, and dispute materials, as well as upload business documents for the Adyen contract. The user also has access to generic reports as well as the risk, conversion, and DCC reports. |
| Merchant allowed own password reset | The user can reset their own password. Enabled by default for all users. If you disable this role, an admin needs to personally perform password resets for this user. |
| Merchant report | The user can download, generate, and subscribe to all reports. The user can also view the payment lifecycle and shopper insights dashboards. |
| Merchant standard role | The user can log in to the Customer Area. Enabled by default for all users. If you disable this role, the user is no longer able to log in to the Customer Area. |
| Merchant system messages | The user can subscribe to Customer Area notifications. |
In-person payments (POS)
The following roles allow you to create and manage POS resources:
| Role | Permissions |
|---|---|
| Merchant Fix POS Payments role | The user can cancel or capture POS payments in the Customer Area. |
| Merchant POS Report role | The user can download and generate the DCC report, the POS terminal fleet report, and the POS overview dashboard (a summary of POS transaction volumes by entry mode, terminal type, and software). This role must be combined with the View Payments role. |
| Merchant POS standard role | The user can view terminal orders, view the list of store IDs and view terminal configurations at merchant level. |
| Merchant POS Terminal Management Admin role | The user has full terminal management permissions, including customizing on merchant and company account level, as well as assigning and boarding terminals. The user also has access to Terminal settings > Passcodes and can enable or disable Terminal API under Integrations. The user can also create stores. |
| Merchant POS Terminal Management role | The user can customize terminals on a merchant account level. |
| Merchant POS Terminal Support role | The user can view terminals and stores, and move terminals between merchant accounts or stores. |
| Merchant POS Terminal View role | The user can view terminals, terminal configurations and stores. |
| Merchant terminal order role | The user can view terminal orders, order new terminals, and return broken terminals. |
| Merchant terminal replacement role | The user can place orders for replacement terminals. |
| Merchant terminal return role | The user can view terminal orders, and return broken terminals. |
| Merchant view POS Payment Report | The user can view the POS payment report, and the DCC report. This role must be combined with the View Payments role. |
| Merchant view Shopper Insights Dashboards | The user can view the shopper insights dashboards. This role will be removed. Instead, use the Merchant report role. |
Online payments
The following roles allow you to create and configure payment links:
| Role | Permissions |
|---|---|
| Hosted Checkout and Pay by Link Settings | The user can configure the Hosted Checkout and Pay by Link payment pages through the Customer Area. |
| Pay by Link Interface | The user can create payment links through the Customer Area. |
Partners
The following roles allow you to manage partner permissions:
| Role | Permissions |
|---|---|
| Merchant access manage | View merchant accounts connected to the portal account and request access to manage these merchants accounts. |
| Partner admin | Manage account settings and users, and change the logo for the portal account. |
| Partner marketing resources view | View and download the marketing resources available in the Partner Portal. |
| Partner referrals view | View referrals. |
| Partner referrals manage | View and add referrals. |
| Partner commissions view | View the partner commission statement. |
Platforms
The following roles allow you to create and manage balance platform resources in your Customer Area:
Role |
Permissions |
|---|---|
| Balance platform base role | The user can view all transfers, accounts, payment instruments, and, if applicable, the pages for Issuing. |
| Download transfer confirmation letter | The user can download bank transfer confirmation letters from the Transfers page. To use this role, the user must also have the Balance platform base role. |
| Download KYC documents | The user can view and download the content of documents that account holders have uploaded during their onboarding and based on which KYC checks have been performed. To use this role, the user must also have the Balance platform base role. |
| Download Balance Platform reports | The user can download previously generated Balance Platform Reports. |
| Generate Balance Platform reports | The user can generate, schedule, and download Balance Platform Reports. |
| Initiate transfers | The user can transfer funds to a balance account or transfer instrument. To use this role, the user must also have the Balance platform base role. |
| Manage account holder capabilities | The user can enable, disable, or request new capabilities for an account holder. To use this role, the user must also have the Balance platform base role. |
| Manage account holders & legal entities | The user can manage legal entities and transfer instruments in the Balance Platform Customer Area. They can also launch hosted onboarding. To use this role, the user must also have the Balance platform base role. |
| Manage sweep configurations | The user can create, activate, deactivate, or delete sweep configurations for a balance account. To use this role, the user must also have the Balance platform base role. |
| Manage new split configuration settings | The user can create and manage split configuration profiles and rules. |
| View account holders PII | The user can view unmasked personally identifiable information (PII) belonging to legal entities of type individual, or sole proprietorship. To use this role, the user must also have the Balance platform base role. |
| View bank transfers PII | The user can view unmasked personally identifiable information (PII) related to third-party bank accounts that belong to individuals. This role only applies to the Transfers page. To use this role, the user must also have the Balance platform base role. |
| View KYC documents | The user can view the list of documents that account holders have uploaded during their onboarding and based on which KYC checks have been performed. To use this role, the user must also have the Balance platform base role. |
Risk
The following roles allow you to manage risk and disputes:
| Role | Permissions |
|---|---|
| Download 3DS data | The user can download raw 3D Secure data from the payment details page of each transaction. |
| Management Dynamic 3D Secure Rules | The user can change the Dynamic 3D Secure settings. |
| Manage referral lists | The user can view and change block and trust lists. |
| Merchant change additional risk settings | The user can view and allow Device Fingerprinting and Persistent Cookies. |
| Merchant change risk settings | The user can view risk reports, and manage risk configurations and block and trust lists. |
| Merchant dispute management | The user can manage payment disputes (including chargebacks and RFIs) and upload defense documents. |
| Merchant Manual Review | The user can view the manual review list and take manual review actions. These actions include adding payment attributes to or removing them from block and trust lists. |
| Merchant View Oil Splash role | The user can view the shopper DNA oil splash and use the oil splash search functionality. The oil splash contains shopper DNA data from shoppers for all merchant accounts within your company. |
| Merchant View Risk Results role | The user can view detailed risk check results for each transaction. |
| Merchant view risk settings | The user can view risk configurations and block and trust lists. |
| Risk Admin | This user has full risk management permissions, including viewing risk reports and shopper data. The risk admin can manage risk configurations, payment disputes (including chargebacks and RFIs), and block and trust lists, in addition to manually reviewing payments and uploading defense documents. |
| Upload chargebacks role | The user can upload a CSV file with PSP references for which chargebacks are known to have occurred. The corresponding payment will be labeled as a chargeback in the system. |
| View Risk Reports | The user can download and subscribe to risk reports. |
Transactions
The following roles allow you to manage payments:
Role |
Permissions |
|---|---|
| CallCenter user | The user can access the Customer Area, and make payments in the call center. |
| CallCenter user tokenization role | The user can use tokens for recharges in the MOTO call center. |
| Data Protection Officer | The user can send data protection requests, and configure the transaction retention period in order to restrict company payments visibility. |
| Data Protection Operations | The user can send data protection requests. |
| Merchant manage payments | The user can refund, cancel, or capture a payment from the Payment details page in the Customer Area. This role must be combined with the View Payments role. |
| Merchant allow bank-refund role | The user can refund payments where the payment method used is officially not refundable. The refund will be performed by a bank transfer, and not linked to the payment. Although the payment has been refunded, a chargeback can still occur with a direct debit. |
| Merchant decrypt GiftCards | The user can view the decrypted giftcard number. |
| Merchant manage CallCenter | The user can change the call center settings, for example the skin used for the call center. |
| Merchant manage payouts - thirdparty | The user can manually confirm or decline payouts to bank accounts or wallets. |
| Merchant manage payouts - withdrawal | The user can manually confirm or decline payouts for a withdrawal related to gambling or trading. |
| Merchant submit batch modifications | The user can create and upload input files for batch processing of refunds, captures, and cancels. |
| Merchant re-authorise payments | The user can re-authorise payments in the Customer Area. |
| Merchant view payouts | The user can view open and processed payouts in the Customer Area. |
| View Acquiring Details | The user can view details about the acquiring, for example the raw acquirer response codes. |
| View Payments | The user can look up payments and offers, and access the payment search pages. Enabled by default for all users. |
Classic platforms
The following roles allow you to create and manage resources for classic platforms integrations:
Role |
Permissions |
|---|---|
| Allow the user to download the payout confirmation letter | The user can download the payout letter from the Customer Area. |
| Instruct payouts to bank accounts for all account holders from the customer area | The user can initiate payouts to account holders' bank accounts. |
| Manage HOP settings | The user can customize the appearance for their hosted onboarding page and can access an onboarding page on behalf of an account holder. |
| Merchant Extended MarketPlace role | The user can manage account holders and split configurations, view KYC details and reports, extend the inactivation or suspension deadline, and download the payout letter from the Customer Area. |
| Merchant MarketPlace role | The user can view the Sub-merchants page, where they can view the KYC status, payout methods, payout history, and transactions of account holders. If Adyen Score is enabled, the user can view the Case management and Risk signals pages. |
| Merchant Marketplace Risk Role | In Adyen Score, the user can disable payouts, suspend account holders, refund payments, and flag risk signals as false positive. |
| Merchant Marketplace Risk Admin Role | In Adyen Score, the user can configure settings such as create or edit custom risk signals, edit high risk lists, and set weights for risk signals. |
| Manage split configuration settings | The user can create and manage split configuration profiles and rules. |
| Perform and manage Fund Transfers from the customer area | The user can transfer funds between accounts. |