--- title: "Roles" description: "Find out what roles your API credential needs to do an action." url: "https://docs.adyen.com/development-resources/api-credentials/roles" source_url: "https://docs.adyen.com/development-resources/api-credentials/roles.md" canonical: "https://docs.adyen.com/development-resources/api-credentials/roles" last_modified: "2023-06-26T15:25:00+02:00" language: "en" --- # Roles Find out what roles your API credential needs to do an action. [View source](/development-resources/api-credentials/roles.md) API credentials have roles which say what the credential is allowed to do. Your company API credential, for example **ws\@Company.****\[YourCompanyAccount]**, has a set of roles that were assigned by default when the company account was created. These default roles are marked in the tables on this page. Any role that your **ws** credential has, can be assigned to other credentials in your company. These roles are available through the Customer Area UI and through Management API. If you need roles that your **ws** credential doesn't have, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other). ## Roles for payments The following table show the most frequently used API credential roles for payments. | Role name | Assigned by default | Description | | ------------------------------------- | ------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Merchant PAL webservice role | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Make API requests to Adyen. If you disable this role, you can no longer process transactions with this API credential. | | Checkout webservice role | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use our [Checkout API](https://docs.adyen.com/api-explorer/Checkout/latest/overview). | | Merchant Recurring role | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use [tokenization](/online-payments/tokenization) to save shopper's payment details and use them for future payments. | | Data Protection API | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use the [Data Protection API](/development-resources/data-protection-api), which allowed you to delete data, as required by General Data Protection Regulation (GDPR). | | Checkout encrypted cardholder data | | Use our [Drop-in](/payment-methods/cards/web-drop-in), [Components](/payment-methods/cards/web-component), or [Custom Card fields](/payment-methods/cards/custom-card-integration) to send in encrypted card data. For this role, you need to assess your PCI DSS compliance according to [Self-Assessment Questionnaire A (SAQ A)](/development-resources/pci-dss-compliance-guide?tab=drop_in_or_components_2). | | API PCI Payments role | | If you want to submit payment requests with raw card data, you need to assess your PCI DSS compliance according to [Self-Assessment Questionnaire D (SAQ D)](/development-resources/pci-dss-compliance-guide?tab=api_only_4). If you are using a Service Provider who has access to your shoppers' cardholder data, see the [requirements when using a Service Provider](/development-resources/pci-dss-compliance-guide#service-providers). To enable this role, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other). | | API Payment RefundWithData | | Submit [unreferenced refunds](/online-payments/classic-integrations/modify-payments/refund#unreferenced-refund). To enable this role, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other). | | Management API—Assign Terminal | | Use our [Management API](/point-of-sale/automating-terminal-management/assign-terminals-api) to assign payment terminals. | | Cloud Device API role | | Use our [Cloud device API](https://docs.adyen.com/api-explorer/cloud-device-api/latest/overview). | | Allow SDK download for POS developers | | Download the Android and iOS mobile SDKs to use our [Mobile solutions](/point-of-sale/ipp-mobile/). | ## Management API roles The following table show the most frequently used API credential roles for using the Management API. | Role name | Assigned by default | Description | | -------------------------------------------------------- | ------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Management API—Account read | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the company and merchant accounts that the API credential has access to. | | Management API—Stores read | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the stores that the API credential has access to. | | Management API—Stores read and write | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, and update the stores that the API credential has access to. | | Management API—API credentials read and write | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, update, and delete the API credentials that the API credential has access to. | | Management API—Users read and write | | Get, create, and update the users that the API credential has access to. | | Management API—Webhooks read | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the webhooks that the API credential has access to. | | Management API—Webhooks read and write | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, update, and delete the webhooks that the API credential has access to. | | Management API—Payment methods read | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the payment methods that the API credential has access to. | | Management API—Payment methods read and write | | Get, create, and update the payment methods that the API credential has access to. | | Management API—Terminal ordering read | | Get the payment terminal orders, shipping locations, and billing locations that the API credential has access to. | | Management API—Terminal ordering read and write | | Get, create, and update the payment terminal orders, shipping locations, and billing locations that the API credential has access to. | | Management API—Terminal settings read | | Get the payment terminal settings that the API credential has access to. | | Management API—Terminal settings read and write | | Get, create, and update the payment terminal general settings that the API credential has access to. | | Management API—Terminal settings Advanced read and write | | Get, create, and update the [sensitive payment terminal settings](/point-of-sale/automating-terminal-management/configure-terminals-api#sensitive-terminal-settings) that the API credential has access to. | | Management API—Terminal actions read | | Get the payment terminal actions that the API credential has access to. | | Management API—Terminal actions read and write | | Get, create, and update the payment terminal actions that the API credential has access to. | | Management API—SplitConfiguration read and write | | Get, create, update, and delete split configuration profiles that determine if and how to split payments in an [Adyen for Platforms](/platforms/process-payments) integration. |