Permissions of the Friends module can be set in both Site manager and CMS Desk, in the Administration -> Permissions section, in the Modules -> Friends permission matrix:

The following permissions can be assigned to particular roles:
| • | Manage - members of the role can manage Friends of particular users in CMS Desk -> Administration -> Users |
| • | Read - members of the role can view friends of particular users in CMS Desk -> Administration -> Users |
Page url: http://devnet.kentico.com/docs/5_0/devguide/index.html?friends_security.htm