Admin permissions (16)

Generated from commit 2ebf341 on 2026-09-02 by tools/docs/generate.ts. Do not edit this file. Fix the generator instead.

The super admin implicitly holds all of these. admins:manage is super-admin only.

Permission	Value	Enforced on
PAYMENTS_READ	payments:read	10 handlers
PAYMENTS_WRITE	payments:write	6 handlers
LEDGER_READ	ledger:read	11 handlers
LEDGER_WRITE	ledger:write	3 handlers
TRUEUP_READ	trueup:read	5 handlers
TRUEUP_APPROVE	trueup:approve	5 handlers
VIRTUAL_CARDS_MANAGE	virtual-cards:manage	1 handler
USERS_READ	users:read	5 handlers
USERS_WRITE	users:write	1 handler
SUBSCRIPTIONS_MANAGE	subscriptions:manage	10 handlers
NOTIFICATIONS_SEND	notifications:send	4 handlers
BUNDLE_RUNS_READ	bundle-runs:read	1 handler
BUNDLE_RUNS_WRITE	bundle-runs:write	1 handler
DOCS_READ	docs:read	5 handlers
DOCS_WRITE	docs:write	3 handlers
ADMINS_MANAGE	admins:manage	7 handlers

Where each is enforced

payments:read

• ach-escalation/ach-debit-escalation-admin.controller.ts#list
• ach-escalation/ach-debit-escalation-admin.controller.ts#detail
• payment/controllers/admin-payment.controller.ts#listAllOneSubs
• payment/controllers/admin-payment.controller.ts#listOneTimeCharges
• payment/controllers/admin-payment.controller.ts#listFreeMonthBumps
• payment/controllers/admin-payment.controller.ts#listOneSubs
• payment/controllers/admin-payment.controller.ts#listSplitConversions
• payment/controllers/admin-payment.controller.ts#getSplitConversionPlan
• pricing/controllers/admin-pricing.controller.ts#get
• promotions/controllers/admin-promotions.controller.ts#list

payments:write

• ach-escalation/ach-debit-escalation-admin.controller.ts#constructor
• airtable/triggers/controllers/payment-admin.controller.ts#constructor
• common/auth/require-permissions.decorator.ts#SetMetadata
• payment/controllers/admin-payment.controller.ts#constructor
• pricing/controllers/admin-pricing.controller.ts#update
• promotions/controllers/admin-promotions.controller.ts#constructor

ledger:read

• ledger/controllers/ledger-admin.controller.ts#passportBalance
• ledger/controllers/ledger-admin.controller.ts#upcomingBills
• ledger/controllers/ledger-admin.controller.ts#subscriptionFrequency
• ledger/controllers/ledger-admin.controller.ts#passportAccount
• ledger/controllers/ledger-admin.controller.ts#passportLedger
• ledger/controllers/ledger-admin.controller.ts#listMovements
• ledger/controllers/ledger-admin.controller.ts#listLedgerUsers
• ledger/controllers/ledger-admin.controller.ts#financialsSummary
• ledger/controllers/ledger-admin.controller.ts#transactionTimeline
• ledger/controllers/ledger-admin.controller.ts#financialsForUser
• ledger/controllers/ledger-admin.controller.ts#getEntries

ledger:write

• ledger/controllers/ledger-admin.controller.ts#backfillMovements
• ledger/controllers/ledger-admin.controller.ts#syncUser
• ledger/controllers/ledger-admin.controller.ts#recategorize

trueup:read

• trueup/controllers/trueup-admin.controller.ts#preview
• trueup/controllers/trueup-admin.controller.ts#listEligibleCustomers
• trueup/controllers/trueup-admin.controller.ts#listScheduled
• trueup/controllers/trueup-admin.controller.ts#listActivity
• trueup/controllers/trueup-admin.controller.ts#listForQuarter

trueup:approve

• trueup/controllers/trueup-admin.controller.ts#calculate
• trueup/controllers/trueup-admin.controller.ts#cancelScheduled
• trueup/controllers/trueup-admin.controller.ts#saveDraft
• trueup/controllers/trueup-admin.controller.ts#sendTest
• trueup/controllers/trueup-admin.controller.ts#sendToCustomer

virtual-cards:manage

• virtual-card/controllers/virtual-card-admin.controller.ts#constructor

users:read

• admin-seed/test-seed.controller.ts#preview
• feedback/controllers/admin-support.controller.ts#listTickets
• feedback/controllers/admin-support.controller.ts#listFeedback
• users/controllers/user-admin.controller.ts#constructor
• users/controllers/user-admin.controller.ts#list

users:write

• feedback/controllers/admin-support.controller.ts#resolveTicket

subscriptions:manage

• admin-seed/test-seed.controller.ts#apply
• admin-seed/test-seed.controller.ts#stampUtilityInvoices
• admin-seed/test-seed.controller.ts#reset
• airtable/controllers/admin-utilities.controller.ts#list
• airtable/controllers/admin-utilities.controller.ts#calendar
• bundle-run-admin/bundle-run-admin.resolver.ts#revealServiceCredentialsBySubscription
• bundle-run-admin/bundle-run-admin.resolver.ts#revealServiceCardBySubscription
• logo-resolver/resolvers/brand-admin.resolver.ts#constructor
• payment/controllers/admin-payment.controller.ts#oneSubCalendar
• subscriptions/controllers/admin-subscriptions.controller.ts#constructor

notifications:send

• notifications/controllers/admin-notifications.controller.ts#constructor
• push-notification/controllers/notification-admin.controller.ts#constructor
• push-notification/resolvers/admin-push.resolver.ts#constructor
• utility-insights/controllers/utility-insights-admin.controller.ts#constructor

bundle-runs:read

• bundle-run/bundle-run-admin.resolver.ts#constructor

bundle-runs:write

• bundle-run-admin/bundle-run-admin.resolver.ts#constructor

docs:read

• docs-store/docs-store.controller.ts#list
• docs-store/docs-store.controller.ts#get
• docs-store/docs-store.controller.ts#history
• docs-store/docs-store.controller.ts#pending
• docs-store/docs-store.controller.ts#proposal

docs:write

• docs-store/docs-store.controller.ts#approve
• docs-store/docs-store.controller.ts#reject
• docs-store/docs-store.controller.ts#edit

admins:manage

• admin-management/admin-management.resolver.ts#createAdmin
• admin-management/admin-management.resolver.ts#listAdmins
• admin-management/admin-management.resolver.ts#updateAdminPermissions
• admin-management/admin-management.resolver.ts#suspendAdmin
• admin-management/admin-management.resolver.ts#reactivateAdmin
• admin-management/admin-management.resolver.ts#resendAdminInvite
• admin-management/admin-management.resolver.ts#deleteAdmin