Index: backend/src/main/java/medora/controller/BillingController.java
===================================================================
--- backend/src/main/java/medora/controller/BillingController.java	(revision 6c00695efaeff79d43ec7934ae4e04fac7bd67a0)
+++ backend/src/main/java/medora/controller/BillingController.java	(revision b63d7b5e4b1c98d1e978322be8e809ceee661337)
@@ -253,8 +253,8 @@
             }
 
-            // Only ADMIN can update payment status
-            if (!role.equals("ADMIN")) {
-                return ResponseEntity.status(HttpStatus.FORBIDDEN)
-                        .body(Map.of("error", "Only administrators can update payment status"));
+            // ADMIN and BILLING_ADMIN can update payment status
+            if (!role.equals("ADMIN") && !role.equals("BILLING_ADMIN")) {
+                return ResponseEntity.status(HttpStatus.FORBIDDEN)
+                        .body(Map.of("error", "Only administrators and billing admins can update payment status"));
             }