Permissions of the Friends module can be set in both Site manager and CMS Desk, in the Administration -> Permissions section. There, you need to select the Modules -> Friends permission matrix.
The following permissions can be assigned to particular roles:
|•||Manage - members of the role can manage Friends of particular users in CMS Desk -> Administration -> Users|
|•||Read - members of the role can view friends of particular users in CMS Desk -> Administration -> Users|
Page url: http://devnet.kentico.com/docs/5_5r2/devguide/index.html?friends_security.htm