Permissions for User Actions

Lock/unlock user

Both customers and staff

If the user is a customer: “Can lock user”
If the user is a staff member: “Can lock staff user”

Verify user

Only customers

Requires the offline_verification feature setting to be enabled by Narmi. No specific permission required.

Resend invite

Only applies to staff users who have not reset their password after staff account creation

Admins can only be resent an invite by other Admins. Regular staff users can be resent an invite by Admins or any staff user with “Can add staff user” permission.

Check for deleted transactions

Only customers

No specific permission required

Manage linked core user IDs

Only non-business customers

“Can manage user's linked core user ids”

Change core user ID

Only non-business customers

“Can change user core user id”

Update user

Only customers who are not business sub-users

No specific permission required

Create or update Billpay credentials

Only customers

“Can manage a users bill pay credentials”

Show enrollment code

Only customers who have not completed enrollment

"Can view user enrollment code via staff portal"

Resend enrollment code

Only customers who have not verified their enrollment code

“Can resend password reset user”

Reset password

Only customers who have completed enrollment verification (if they haven’t completed enrollment code verification, we send them the enrollment code instead of a password reset). In UAT environments (but not production), this can also be used to generate a password reset link for staff members.

“Can resend password reset user”

Update email

Only customers

"Can change user email”

Log in as user

Only customers

“Can emulate user”

Link organizations

Only business customers who are Org Account Holders and Org users with Admin permissions

“Can add organization link” and “Can view organization”

Unlink organizations

Only business customers who are Org Account Holders and Org users with Admin permissions

“Can delete organization link”