Permission Groups

SAS has a very flexible permissions system allowing admins to create any type of managers. Each manager must belong to a permissions group. Groups can be created from Settings->Permissions. To create one, go to Actions and select ‘Create’, giving it a proper name. Later, select the newly created group from the list. Below the list, there will be two trees, the right one is for the available permissions, and the left one is for the given ones. Select the desired permissions from the right tree and move them to the left tree using the arrows in the middle.

The table below explains the meaning of each permission type:

Regular

Use with Caution

Dangerous

Category	Name	Description
Users	Activate	Allows user activation via manager
Users	Activate using voucher	Allows manager to activate users using vouchers
Users	Activate using manager balance	Allows manager to activate users using the available manager balance
Users	Activate using user balance	Allows manager to activate a user using the balance available in the user account.
Users	Edit Advanced Fields (dangerous!)	Allows the manager to edit user data such as the expiration, profile. This is dangerous and should not be given to regular managers. Meant to be given only for system administrators.
Users	Purchase Addons	Allows the manager to activate addons for the user. Addons could be things IPTV, VOIP... Addons are creating from the profile page as a special type of profiles.
Users	Cancel Scheduled Profile Change	Allows the manager to cancel a scheduled profile change in the future for a user he owns.
Users	Change Profile	Allows the manager to change service profile for expired users only.
Users	Change Profile of Active Users	Allows the manager to change service profile for activate users. This is not recommended as it is not logical to change the profile for active users only the fly. Usually their should be a procedure for this action, such as canceling the current subscription and refunding the users first.
Users	Create	Allows the manager to create new users
Users	Delete	Allows deleting users.
Users	Deposit Money	Allows the manage to deposit money into user's wallet. The deposited amount will be deducted from the manager's balance.
Users	Disconnect	Allows disconnecting online users.
Users	Show User History	Show users history log. This will list all events and actions made on the selected user.
Users	Index	Lists users belonging to the manager
Users	List All Users	Lists all users in the system regardless of their owner. This is useful for support managers.
Users	List All Group Users	This will let the manager to list all users belonging to the same group of the manager. This is useful to be given for group managers.
Users	Show Users Invoices	Lists all user invoices.
Users	Show Users Journal	List user journal entires. These entries are the financial transactions made by or on the user.
Users	MAC Lock User	Permits locking the user on a specific Mac address.
Users	Ping	Allows pinging the user via the router. This feature is available for Mikrotik only.
Users	Rename	Allows renaming users.
Users	Reset Daily Quota	Resets the traffic consumed by a user during the day.
Users	Show Sessions	Shows user connection sessions.
Users	Update	Allows updating users.
Users	Withdraw Money	Allows money withdrawal from the user. The deducted amount of money will be transferred to the manager who performed the action.
Users	Export to Excel	Allows exporting users list into Microsoft Excel file.
Users	Extend Service	Allows extending user service via Extension Profiles.
Users	Cancel Subscription	Allows canceling user subscription.
Users	Reward Points System	Enabled the use of reward points by the manager to activate or extend users with loyalty points.
Users	POS	When this permission is given, the manager won't be able to see users list. However, it will be possible to search for users by their exact username or phone. This feature is useful for point of sales booths where the manager shouldn't see all existing users, while still being able to activate users not belonging to him.
Users	Live Traffic Monitor	Allows monitoring user's live traffic via SNMP.
Users	Delete Active Users	Allows deleting activate users. Not recommended for regular managers. Activate users should not be deleted without canceling their subscription.
Users	Show Support Tickets	Shows support tickets submitted by users. This permission should be given to support personnels.
Users	Show Freezones Traffic	Shows freezone traffic data.
Users	Show Password	Shows user's dialup password in the User Overview page.
Users	Edit MAC addresses	Allows editing the list of allowed MAC addresses for the users.
Users	Add Traffic	Allows adding extra traffic for the user. This permission is not recommended for regular managers.
Users	Auto Renew	Sets the auto renew flag for users. Auto renew works only if the user has enough balance to activate his service profile
Users	Compensate	Allows requesting compensation for users. Compensation could be days, hours, traffic. The requested compensation should be approved by a higher manager to be applied.
Users	Approve Compensations	Allows approving reviewing and approving (or rejecting) compensation requests submitted by managers.
Users	Change Parent	Allows changing user's parent.

Managers	Change Self Password	Allows managers to change their passwords
Managers	Create	Allows creating new managers. This should be given to managers who are allowed to create sub managers.
Managers	Delete	Allows deleting managers.
Managers	Deposit Money	Allows adding balance to other managers.
Managers	Index	Lists sub-managers belonging to the logged in manager.
Managers	Index (All Managers)	Lists all system managers. This should not be given to regular managers and meant to be used by HQ personnels.
Managers	Show Invoices	Shows manager invoices.
Managers	Show Journal	Shows manager journal entries.
Managers	Login As (Dangerous!)	Allows the manager to login as another manager without using their passwords ! This is a very dangerous permission and should be used with caution. Meant to be used only by support personnels.
Managers	Show Receipts	Shows manager receipts
Managers	System Administrator	Give the manager a system administrator privileges. Managers with this permission have total control over the system.
Managers	Edit / Update	Allows updating manager's data
Managers	Withdraw Money	Allows deducting money from managers.
Managers	Export to Excel	Allows exporting managers list to a Microsoft Excel file.
Managers	Rename	Allows renaming managers.
Managers	Two Factor Auth (2FA)	Allows the manager to setup two factor authentication for himself. This requires using a 2FA app such a Google Authenticator.
Managers	Lock managers to PPP service	Allows the manager to lock users of sub-managers to specific PPP service. Users locked on PPP service name will not be able to dial-up from different PPP services.

Cards	Change Owner	Changes the owner of card series
Cards	Delete	Deletes card series
Cards	Designer	Allows access to the card design system, enabling the manager to create card templates for PDF download
Cards	Download	Allows downloading cards series, in CSV & PDF formats.
Cards	Generate Refill Cards	Generates refill cards
Cards	Generate Prepaid User Cards	Generates prepaid users cards
Cards	Cancel Generator	Cancels
Cards	Series Index
Cards	Suspend & Release
Cards	List PINs
Cards	Verify Cards
Cards	Change Owner (Range)

Groups	Assign
Groups	Create
Groups	Delete
Groups	Update
Groups	Index

NAS	Index
NAS	Create
NAS	Update
NAS	Delete
NAS	Export

Profiles	Index
Profiles	Create
Profiles	Delete
Profiles	Update
Profiles	Pricing Management
Profiles	Custom Radius Attributes
Profiles	Policy Manager