1. List the tasks the staff member needs, including the records they must view and the changes they may make.
2. Open System Settings and Administrator Roles. Create a new role group or edit an appropriate existing role.
3. Select the required permissions, including the related management permission where a create action depends on it.
4. Allow the required landing page, such as Main Homepage or Support Center Overview, so the user can work after login.
5. Set report access and the categories of administrative emails the role should receive.
6. Save, then assign the role through Administrator Users and select the intended support departments.
7. Test the role with representative permitted and prohibited tasks before relying on it.

Pay particular attention to refunds, invoice adjustments, module commands, addon configuration, API administration and exports. A staff member who answers billing questions may need to view an invoice without permission to change money or terminate a service.

In WHMCS 9.0, invoice-management and credit-or-debit-note permissions affect the available billing workflow. Grant the capabilities needed for the approved role rather than using a full administrator account to avoid an access error.

• Roll out two-factor authentication for WHMCS users and staff
• Create restricted WHMCS API credentials for an integration
• Create WHMCS support departments and staff access
• Correct a WHMCS invoice without losing its audit trail

• WHMCS: add or edit an administrator role
• WHMCS admins
• WHMCS API credentials
• WHMCS 9.0 invoice management