Controls on take payments with saved profiles

Are there any controls on make payments for clients? This seems sketchy that I can use a client’s saved payment profiles to make a payment without their knowledge. There is nothing that tells them that saved payment profiles can be used by service provider. I get that there can be contracts that have automatic payments, but If I put in an invoice, I can just make a payment. Shouldn’t there be a way for a client to store a payment profile without me being able to use it? It should be required that the client check a box that I can process payments for them. This totally freaked out a client when they were having a hard time making a payment.

Hi rcamp, you can enable permissions on what Techs can access, but as a global admin you do have access to charge customers on invoices with their stored payment profile.

That being said, the card details and processing are all done through the processor.