Portal Action Permissions

Beyond navigation visibility and View/Edit access, a profile controls which portal actions its users can perform — the self-service and CSR-assisted operations exposed in the customer, partner, and CSR portals, such as changing or cancelling a plan.

Change Plan vs Cancel Plan

Changing a plan and cancelling a plan are separate permissions, so you can grant one without the other:

Who	Permission	Allows
Customer	Change My Plan	The customer upgrades or downgrades their own subscription.
Customer	Cancel My Plan	The customer cancels their own subscription.
Partner (own)	Change / Cancel My Plan	A partner acting on their own subscription.
Partner (managed)	Change / Cancel Customer Subscriptions	A partner acting for the customers they manage.
CSR	Change / Cancel Customer Subscriptions	A CSR acting on a customer's behalf.

Because they're independent, you can, for example, offer a profile that can cancel but not change plan (route upgrades through a CSR), or one that can change plan but must send cancellations to a retention flow.

Previously this was a single combined "manage subscription" grant. Existing profiles were automatically split into the separate Change and Cancel permissions, so no access was lost — you simply have finer control now.

Set these on a profile from the user menu (your name, bottom-left) → Settings → Profiles. They sit alongside the permission levels and record access (visibility, View/Edit, and record scope) that govern the rest of the platform.