Permissions of the Friends module can be set in both Site manager and CMS Desk, in the Administration -> Permissions section, in the Modules -> Friends permission matrix:
The following permissions can be assigned to particular roles:
| • | Manage - members of the role can manage Friends of particular users in CMS Desk -> Administration -> Users | 
| • | Read - members of the role can view friends of particular users in CMS Desk -> Administration -> Users | 

Page url: http://devnet.kentico.com/docs/devguide/index.html?friends_security.htm