---
title: "Roles"
description: "Find out what roles your API credential needs to do an action."
url: "https://docs.adyen.com/development-resources/api-credentials/roles"
source_url: "https://docs.adyen.com/development-resources/api-credentials/roles.md"
canonical: "https://docs.adyen.com/development-resources/api-credentials/roles"
last_modified: "2023-06-26T15:25:00+02:00"
language: "en"
---

# Roles

Find out what roles your API credential needs to do an action.

[View source](/development-resources/api-credentials/roles.md)

API credentials have roles which say what the credential is allowed to do.

Your company API credential, for example **ws\@Company.****\[YourCompanyAccount]**, has a set of roles that were assigned by default when the company account was created. These default roles are marked in the tables on this page. Any role that your **ws** credential has, can be assigned to other credentials in your company. These roles are available through the Customer Area UI and through Management API.

If you need roles that your **ws** credential doesn't have, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other).

## Roles for payments

The following table show the most frequently used API credential roles for payments.

| Role name                             | Assigned by default                                                                         | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| ------------------------------------- | ------------------------------------------------------------------------------------------- |   |
| Merchant PAL webservice role          | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Make API requests to Adyen. If you disable this role, you can no longer process transactions with this API credential.                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| Checkout webservice role              | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use our [Checkout API](https://docs.adyen.com/api-explorer/Checkout/latest/overview).                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Merchant Recurring role               | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use [tokenization](/online-payments/tokenization) to save shopper's payment details and use them for future payments.                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Data Protection API                   | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Use the [Data Protection API](/development-resources/data-protection-api), which allowed you to delete data, as required by General Data Protection Regulation (GDPR).                                                                                                                                                                                                                                                                                                                                                                                            |
| Checkout encrypted cardholder data    |                                                                                             | Use our [Drop-in](/payment-methods/cards/web-drop-in), [Components](/payment-methods/cards/web-component), or [Custom Card fields](/payment-methods/cards/custom-card-integration) to send in encrypted card data. For this role, you need to assess your PCI DSS compliance according to [Self-Assessment Questionnaire A (SAQ A)](/development-resources/pci-dss-compliance-guide?tab=drop_in_or_components_2).                                                                                                                                                 |
| API PCI Payments role                 |                                                                                             | If you want to submit payment requests with raw card data, you need to assess your PCI DSS compliance according to [Self-Assessment Questionnaire D (SAQ D)](/development-resources/pci-dss-compliance-guide?tab=api_only_4). If you are using a Service Provider who has access to your shoppers' cardholder data, see the [requirements when using a Service Provider](/development-resources/pci-dss-compliance-guide#service-providers). To enable this role, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other). |
| API Payment RefundWithData            |                                                                                             | Submit [unreferenced refunds](/online-payments/classic-integrations/modify-payments/refund#unreferenced-refund). To enable this role, contact our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other).                                                                                                                                                                                                                                                                                                                             |
| Management API—Assign Terminal        |                                                                                             | Use our [Management API](/point-of-sale/automating-terminal-management/assign-terminals-api) to assign payment terminals.                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Cloud Device API role                 |                                                                                             | Use our [Cloud device API](https://docs.adyen.com/api-explorer/cloud-device-api/latest/overview).                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Allow SDK download for POS developers |                                                                                             | Download the Android and iOS mobile SDKs to use our [Mobile solutions](/point-of-sale/ipp-mobile/).                                                                                                                                                                                                                                                                                                                                                                                                                                                               |

## Management API roles

The following table show the most frequently used API credential roles for using the Management API.

| Role name                                                | Assigned by default                                                                         | Description                                                                                                                                                                                                 |
| -------------------------------------------------------- | ------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Management API—Account read                              | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the company and merchant accounts that the API credential has access to.                                                                                                                                |
| Management API—Stores read                               | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the stores that the API credential has access to.                                                                                                                                                       |
| Management API—Stores read and write                     | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, and update the stores that the API credential has access to.                                                                                                                                   |
| Management API—API credentials read and write            | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, update, and delete the API credentials that the API credential has access to.                                                                                                                  |
| Management API—Users read and write                      |                                                                                             | Get, create, and update the users that the API credential has access to.                                                                                                                                    |
| Management API—Webhooks read                             | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the webhooks that the API credential has access to.                                                                                                                                                     |
| Management API—Webhooks read and write                   | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get, create, update, and delete the webhooks that the API credential has access to.                                                                                                                         |
| Management API—Payment methods read                      | ![-white\_check\_mark-](/user/data/smileys/emoji/white_check_mark.png "-white_check_mark-") | Get the payment methods that the API credential has access to.                                                                                                                                              |
| Management API—Payment methods read and write            |                                                                                             | Get, create, and update the payment methods that the API credential has access to.                                                                                                                          |
| Management API—Terminal ordering read                    |                                                                                             | Get the payment terminal orders, shipping locations, and billing locations that the API credential has access to.                                                                                           |
| Management API—Terminal ordering read and write          |                                                                                             | Get, create, and update the payment terminal orders, shipping locations, and billing locations that the API credential has access to.                                                                       |
| Management API—Terminal settings read                    |                                                                                             | Get the payment terminal settings that the API credential has access to.                                                                                                                                    |
| Management API—Terminal settings read and write          |                                                                                             | Get, create, and update the payment terminal general settings that the API credential has access to.                                                                                                        |
| Management API—Terminal settings Advanced read and write |                                                                                             | Get, create, and update the [sensitive payment terminal settings](/point-of-sale/automating-terminal-management/configure-terminals-api#sensitive-terminal-settings) that the API credential has access to. |
| Management API—Terminal actions read                     |                                                                                             | Get the payment terminal actions that the API credential has access to.                                                                                                                                     |
| Management API—Terminal actions read and write           |                                                                                             | Get, create, and update the payment terminal actions that the API credential has access to.                                                                                                                 |
| Management API—SplitConfiguration read and write         |                                                                                             | Get, create, update, and delete split configuration profiles that determine if and how to split payments in an [Adyen for Platforms](/platforms/process-payments) integration.                              |
