# Authorization

To send refund requests, you need [Admin API permission](https://docs.digitalriver.com/commerce-api/master/roles-and-permissions#commerce-api-suite-roles-and-permissions) and one of the following [Global Commerce roles](https://docs.digitalriver.com/commerce-api/master/roles-and-permissions#global-commerce-roles-and-permissions): Customer Service Director, Customer Service Supervisor, or Customer Service Representative. Also, all refund requests require your [confidential API key](https://app.gitbook.com/s/oUderMtztdH7OKDXmYbI/commerce-api-reference-guide/api-structure/api-keys#confidential-keys) with `/auth`. See [Sending an API call using `/auth`](https://docs.digitalriver.com/commerce-api/master/sending-api-calls) for more information. Once the Global Commerce user has permission, the user can send refund requests. Global Commerce records users' activities in the order log.