customer portal security role

We have installed the Customer Portal and it's working. Users who have the Support Manager security role have access to the Web Authentication tab on the Contact record. However, Customer Support reps with the CS agent security role do not have access to the Web Authentication tab and so cannot send invitations to contacts. I cannot see where to change their security rights or add this role to give them access to the tab.