Permissions Reference
Every manager belongs to a permission group (Settings → permission groups). This page lists every permission in SAS Radius and what it allows. To create and edit groups, see Permission Groups and Permission Groups: Managing Groups; for ready-made role examples, see Recommended Permission Sets.
- Managers - System Administrator includes every permission except Users - POS.
- Permissions marked Dangerous should be given only to trusted staff.
- Most screens need an "Index" permission to open (for example Users - Index), plus a separate permission for each action.
- Permissions for the User Control Panel decide what subscribers can do in the user portal.
Users
| Permission | What it allows |
|---|---|
| Users - Activate | Show the Activate action for users. The payment methods offered depend on the 'Activate using …' permissions. |
| Users - Activate using voucher | Activate users by redeeming a voucher (refill card). |
| Users - Activate using manager balance | Activate users paid from the manager's own balance. |
| Users - Activate using user balance | Activate or extend users paid from the subscriber's own balance. |
| Users - Add Traffic | Add extra traffic (data) to a user. |
| Users - Purchase Addons | Buy addons for a user (for example a public IP or a MikroTik address list). |
| Users - Edit Advanced Fields (dangerous!) | Edit advanced user fields: expiration date, static IP, simultaneous sessions, user type and MikroTik attributes. Dangerous: allows changing expiration without payment. |
| Users - Auto Renew | Turn the Auto Renew switch on or off in the user form. |
| Users - Cancel Subscription | Cancel a user's subscription. |
| Users - Cancel Scheduled Profile Change | Cancel a scheduled (future) package change for a user. |
| Users - Change Parent | Choose or change the manager (parent) a user belongs to. |
| Users - Change Profile | Change a user's package (immediately when expired). |
| Users - Change Profile of Active Users | Change the package of users who are still active, immediately or scheduled for expiry. Also needs Users - Change Profile. |
| Users - Compensate | Open Compensations and create compensation requests (extra days/time) for users. |
| Users - Approve Compensations | Approve pending compensation requests so they are applied to users. |
| Users - Upload Compensations File | Upload a file of compensation requests for many users at once. |
| Users - Create | Create new users (subscribers). |
| Users - Delete | Delete expired users. A user with a non-zero balance can't be deleted. |
| Users - Delete Active Users | Also delete users whose subscription is still active. Also needs Users - Delete. Dangerous: active subscribers lose service. |
| Users - Deposit Money | Add money to a user's balance (Deposit). |
| Users - Disconnect | Disconnect online users from the Online Users list or a user's page. |
| Users - Enable / Disable | Show the Enable User / Disable User actions in the Users list. In this version only System Administrators can actually enable or disable users. |
| Users - Export to Excel | Export the Users list and the Online Users list to Excel. |
| Users - Extend Service | Give a user a service extension (extend expiration by an extension package). |
| Users - Show Freezones Traffic | Show the Free Zone Traffic tab on a user's page. |
| Users - Show User History | Show the History tab on a user's page (changes and actions on the user). |
| Users - Index | Open the Users menu: Users List, Online Users and user details. Shows the manager's own users and their sub-managers' users. |
| Users - List All Users | See and manage all users in the system, not only users under their own managers; dashboards and reports show system-wide totals. |
| Users - List All Group Users | See and manage all users in the manager's own group, even under other managers. |
| Users - Show Users Invoices | Show the Invoices and Payments tabs on a user's page and the Billing invoices list. |
| Users - Show Users Journal | Show the Journal tab (balance movements) on a user's page. |
| Users - Live Traffic Monitor | Open the Live Traffic graph for an online user in Online Users. |
| Users - Edit MAC addresses | Add, edit and remove the MAC addresses saved on a user. |
| Users - MAC Lock User | Lock a user to their MAC address, from Online Users or the user form. |
| Users - Ping | Ping an online user's connection from Online Users. |
| Users - POS | Point-of-sale mode: the Users list shows only exact search matches (username, phone, name, IDs) but across all users. Not included in System Administrator; gives access to any user found by search. |
| Users - Rename | Change a user's username. |
| Users - Reset Daily Quota | Reset a user's daily traffic quota from the user's page. |
| Users - Reward Points System | Activate or extend users paid with reward points. |
| Users - Show Sessions | Show the Sessions tab (connection history) on a user's page. |
| Users - Show Password | See the user's PPPoE password on the user's page; otherwise it shows as stars. |
| Users - Show Support Tickets | Show the Support Tickets page for subscribers' tickets in the Users menu. |
| Users - Update | Edit a user's details (Edit tab), change their password, and manage their documents and picture. |
| Users - Withdraw Money | Take money out of a user's balance (Withdraw). |
Managers
| Permission | What it allows |
|---|---|
| Managers - Two Factor Auth (2FA) | Set up or turn off two-factor authentication (2FA) for their own login on My Profile. |
| Managers - Change Self Password | Change their own login password. Without it, a manager forced to change password can't complete it. |
| Managers - Create | Create new managers (sub-managers) from the Managers list. |
| Managers - Delete | Delete managers from the Managers list or a manager's page. |
| Managers - Deposit Money | Add money to a manager's balance (Deposit). |
| Managers - Export to Excel | Export the Managers list to Excel. |
| Managers - Index | Open the Managers menu, the managers list and a manager's details page. |
| Managers - Index (All Managers) | See and manage all managers in the system, not only their own sub-managers; also widens reports to all managers. |
| Managers - Show Invoices | Show the Invoices tab on a manager's page. Also needs Reports - Managers Invoices to load data. |
| Managers - Show Journal | Show the Journal tab on a manager's page. Also needs Reports - Managers Journal to load data. |
| Managers - Login As (Dangerous!) | Log in to the panel as another manager, seeing and acting exactly as that manager. Dangerous: allows acting as any manager. |
| Managers - Lock managers to PPP service | Edit a manager's Allowed PPP Services, locking their users to specific PPPoE service names. |
| Managers - Show Receipts | Show manager receipts: the Receipts tab on a manager's page and the Managers Receipts report. |
| Managers - Rename | Change a manager's username. Also needs Managers - Edit / Update. |
| Managers - Self Deposit | Top up their own balance from the header (Self Deposit) using a payment gateway or voucher. |
| Managers - Sub System Administrator | Added automatically together with System Administrator; it grants nothing by itself. Not used in this version |
| Managers - System Administrator | Full access: every permission (except Users - POS), plus sysadmin-only screens like permissions, license, IP pools and system update. Dangerous: full control of the system. |
| Managers - Edit / Update | Edit a manager's details (name, contact, permission group, parent manager). |
| Managers - Update Self Information | Edit their own name and contact details on My Profile. |
| Managers - Withdraw Money | Take money out of a manager's balance (Withdraw). |
Groups
| Permission | What it allows |
|---|---|
| Groups - Assign | Set the group of users and managers in their forms, and filter lists by group. |
| Groups - Create | Create new groups on the Groups page. |
| Groups - Delete | Delete groups on the Groups page. |
| Groups - Index | Open the Groups menu and see the list of groups. |
| Groups - Update | Edit existing groups on the Groups page. |
NAS
| Permission | What it allows |
|---|---|
| NAS - Create | Add new NAS devices (routers/BNGs). Also needed to save changes to an existing NAS. Saving a NAS restarts the RADIUS service briefly. |
| NAS - Delete | Delete NAS devices from the NAS list. Also visible without this permission. |
| NAS - Export | Export the NAS list to Excel. Exports include the RADIUS secrets. |
| NAS - Index | Open the NAS menu and see the list of NAS devices. |
| NAS - Update | Open a NAS device's edit page. Saving changes also needs NAS - Create. |
Profiles
| Permission | What it allows |
|---|---|
| Profiles - Create | Create and save packages, addons, usage notifications and IP pools. Also needed to save edits to a package. |
| Profiles - Delete | Delete profiles from the profiles list. |
| Profiles - Index | Open the Profiles menu and see the list of profiles (packages). |
| Profiles - Pricing Management | Open Profiles → pricing list to set profile prices per manager. |
| Profiles - Custom Radius Attributes | Add, edit and delete custom RADIUS attributes sent for a package. The user-level RADIUS tab is for System Administrators only. |
| Profiles - Update | Open a package's edit page and see its full settings. Saving changes also needs Profiles - Create. |
Profiles - Policies
| Permission | What it allows |
|---|---|
| Profiles - Policy Manager | Manage a package's daily (time-based) speed policies via the Daily Policies link on the package page. |
Cards
| Permission | What it allows |
|---|---|
| Cards - Change Expiry | Change the expiry date of selected card series in Cards. The button is shown only to System Administrators. |
| Cards - Change Owner | Transfer a whole card series to another manager from the Cards list. |
| Cards - Change Owner (Range) | Transfer part of a card series (by range or count) to another manager. |
| Cards - Delete | Delete card series from the Cards list. Dangerous: deleted cards can no longer be used. |
| Cards - Designer | Create and edit card print designs, and choose a design when printing cards. |
| Cards - Download | Use the List, Download CSV and Download PDF actions on a card series. Exported files contain usable card PINs. |
| Cards - Generate Refill Cards | Generate new cards, both refill cards and prepaid user cards. |
| Cards - Generate Prepaid User Cards | Open the card generation Jobs queue page (generation progress). Generating cards itself needs Cards - Generate Refill Cards. |
| Cards - Series Index | Open the Cards menu and see the list of card series. |
| Cards - Cancel Generator | Show the Cancel and Continue buttons in the card generation Jobs queue. The buttons have no effect in this version. |
| Cards - List PINs | View the PIN list of a card series. Also needs Cards - Download, which shows the List action. |
| Cards - Suspend & Release | Suspend card series so they can't be redeemed, and release them again. |
| Cards - Verify Cards | Open Cards → Verify to check a card PIN's status, value and owner. |
Billing
| Permission | What it allows |
|---|---|
| Billing | Open the Billing menu and create subscriber invoices, including issuing an invoice during activation. Also needs Users - Show Users Invoices to list invoices. |
Reports and Logs
| Permission | What it allows |
|---|---|
| Reports - Export Journal | Export the Managers Journal and Debts Journal reports to Excel. |
| Reports - Radius Log | Open the live RADIUS Log page to watch RADIUS requests and replies in real time. |
| Report - Activations | Show the Activations and Activation Statistics reports in the Reports menu. |
| Report - Cards Transfers Log | Open the Cards Transfers Log report (card ownership transfers between managers). |
| Report - Cards Usage | Show the Cards Usage report in the Reports menu (which cards were redeemed and by whom). |
| Report - Payment Gateway Transactions | Open the Payment Gateway Transactions report (online payments). |
| Reports - Managers Invoices | Open the Managers Invoices report; also needed for the Invoices tab on a manager's page. |
| Reports - Managers Journal | Open the Managers Journal and Debts Journal reports; also needed for the Journal tab on a manager's page. |
| Report - Money Transfers | Open the Money Transfers report (deposits and withdrawals between managers and users). |
| Report - Online History | Open the Online History report (hourly, daily and monthly online user counts). |
| Report - Sessions | Open the Sessions report (connection history for all accessible users). |
| Report - Suspicious Users | Show the Suspicious Users report in the Reports menu. Shows users of all managers. |
| Reports - System Log | Open the System Log report (actions done by managers in the panel). |
| Report - Auth Log (Dialup) | Open the Auth Log report showing subscriber login attempts and reject reasons. |
| Report - Users | Show the Users report in the Reports menu (users per manager, per package and on the map). |
Tools
| Permission | What it allows |
|---|---|
| Tools - Announcements | Send announcements to subscribers from Tools → Announcements. Announcements reach all subscribers. |
| Tools -> Bandwidth Control | Use the Bandwidth Controller to set a speed multiplier per package, raising or lowering all its users' speeds. The menu entry is shown only to System Administrators. |
| Tools -> Bulk Changes | Apply bulk changes (profile, expiration, parent, SMS, disconnect…) to all users that match a filter. Dangerous: changes many users at once; menu entry shown only to System Administrators. |
| Tools - Import Data | Import users, managers or cards from a file via Tools → Import. Also needs Users - Create. |
| Tools - System Services | Open Tools → System Services to view, start, stop and restart server services; also Radius Status and tunnels. Dangerous: stopping services can disconnect users. |
Dashboard
| Permission | What it allows |
|---|---|
| Dashboard - Manage | Open Tools → Dashboard Manager to create dashboards and arrange their widgets. Also needs Dashboard - Widgets Factory to list widgets. |
| Dashboard - Widgets Factory | Open Tools → Widget Factory to create and edit dashboard widgets. |
Backup
| Permission | What it allows |
|---|---|
| Backup - Create | Create a new backup from Tools → Backup, and use Google Drive backup. Also needs Backup - Download to see the backup list. |
| Backup - Delete | Delete stored backup files from Tools → Backup. Also needs Backup - Download to see the list. |
| Backup - Download | Open Tools → Backup, see the list of backups and download them. Backups contain all subscriber data and passwords. |
| Backup - Restore | Restore the system from a stored backup. Also needed to upload a backup file. Dangerous: replaces the current database and logs everyone out. |
| Backup - Upload | Shows the Backup menu for uploading a backup file. Uploading itself also needs Backup - Restore. |
Settings
| Permission | What it allows |
|---|---|
| Settings - System Settings | Open and change all pages under Settings (general, network, SMS, email, portal, payment gateways, free zones, etc.). Dangerous: changes apply to the whole system. |
Sites
| Permission | What it allows |
|---|---|
| Settings - Sites Management | Manage sites and assign a site to users, managers, packages and NAS devices; filter lists by site. |
User Control Panel (subscriber portal)
| Permission | What it allows |
|---|---|
| User Control Panel - Activate | Subscriber can renew/activate their subscription in the user portal. |
| User Control Panel - Auto Login | Subscriber is logged in to the user portal automatically from their own connection. |
| User Control Panel - Enable/Disable Auto-Renew | Subscriber can turn auto-renew on or off in the user portal. |
| User Control Panel - Billing | Subscriber can see their invoices and payments in the user portal. |
| User Control Panel - Show Packages | Subscriber can browse the available packages in the user portal. |
| User Control Panel - Cancel Subscription | Subscriber can cancel their own subscription in the user portal. |
| User Control Panel - Change User Info | Subscriber can edit their own personal and contact details in the user portal. |
| User Control Panel - Change Password | Subscriber can change their password in the user portal. |
| User Control Panel - Change Profile | Subscriber can switch to another package in the user portal. |
| User Control Panel - Show Data Usage | Subscriber can see their data usage in the user portal. |
| User Control Panel - Delete Documents | Subscriber can delete documents they uploaded in the user portal. |
| User Control Panel - Show Documents | Subscriber can see their documents in the user portal. |
| User Control Panel - Upload Documents | Subscriber can upload documents (e.g. ID copies) in the user portal. |
| User Control Panel - Extend Users | Subscriber can buy a service extension (e.g. extra days) in the user portal. |
| User Control Panel - Allow Login | Subscriber is allowed to log in to the user portal at all. |
| User Control Panel - Show Sessions | Subscriber can see their connection sessions in the user portal. |
| User Control Panel - Submit Support Tickets | Subscriber can open support tickets in the user portal. |
General
| Permission | What it allows |
|---|---|
| Dummy Permission | Basic permission every manager has automatically; it unlocks screens meant for all managers, such as About. No need to assign it. |