Controlling what customers can do

You control what customers can see and do in the app at two levels. Account, Customer app permissions sets the defaults every customer inherits: for each thing, such as paying invoices, opening tickets or opening cPanel, a switch decides whether customers get it out of the box. These are broad strokes that apply to everyone unless a specific customer is overridden. The permissions are grouped by area, so turning off a whole area is quick. Turning a default off hides that action for every customer who does not have it explicitly allowed, and the app both hides the control and refuses the action on the server, so it holds even if someone pokes at the raw connection.