Permissions

The addon adds 3 server permissions, visible when creating or editing a subuser from Server → Users:

Permission	Constant	What it enables
`domain.read`	`Permission::ACTION_DOMAIN_READ`	View the server's domain list (the Proxy tab shows up, but without this permission it loads no data).
`domain.create`	`Permission::ACTION_DOMAIN_CREATE`	Add a new domain. It's also the permission used to confirm domain ownership verification ("Verify now"), there's no separate permission for that.
`domain.delete`	`Permission::ACTION_DOMAIN_DELETE`	Delete an existing domain.

Notes

The server owner always has all three permissions automatically, just like with any other Pterodactyl permission group.
The "Proxy" tab icon on the frontend is gated behind the domain.* wildcard permission (defined in the route entry injected into routes.ts). A subuser with none of the three permissions won't even see the tab.
There's no separate permission for "view the detailed error" or "force retry"; that doesn't exist as a separate action in this addon.
At the panel administrator level there's no new specific permission: the Admin → Nodes → (node) → Proxy tab uses the same access control as the rest of the admin panel (administrator role).

Go to the server → Users.
Edit the subuser (or create a new one).
In the permissions section, look for the Domain group (its description says "Permissions that control a user's ability to manage custom domains and the nginx reverse proxy for this server").
Check read, create and/or delete as needed.
Save.