Permissions of the Friends module can be set in both Site manager and CMS Desk, in the Administration -> Permissions section. There, you need to select the Modules -> Friends permission matrix.
The following permissions can be assigned to particular roles:
| • | Manage - members of the role can manage Friends of particular users in CMS Desk -> Administration -> Users |
| • | Read - members of the role can view friends of particular users in CMS Desk -> Administration -> Users |

Page url: http://devnet.kentico.com/docs/5_5r2/devguide/index.html?friends_security.htm