In this article, we'll be talking about the difference between the 'Enter invoice' and the 'Pay invoice' permission.
You'll notice that the 'Pay invoice' permission only becomes toggle-able if you have 'Edit invoices' checked.
The main difference between the two is that when you only have the 'Edit invoice' permission, you're only able to finalize the invoice. This means you're only allowed to add products, provide discounts etc.
Here's what the payment tab looks like with only the 'Edit invoice' permission:
Here's what it looks like with the 'Pay invoice' permission.
This makes it possible to create roles that aren't too liberated when it comes to payments, and roles that are meant to double check and/or are solely for financial processes.