diff --git a/app/javascript/dashboard/components-next/Contacts/ContactsHeader/components/ContactMoreActions.vue b/app/javascript/dashboard/components-next/Contacts/ContactsHeader/components/ContactMoreActions.vue
index d5932535c..9deaa84f2 100644
--- a/app/javascript/dashboard/components-next/Contacts/ContactsHeader/components/ContactMoreActions.vue
+++ b/app/javascript/dashboard/components-next/Contacts/ContactsHeader/components/ContactMoreActions.vue
@@ -1,34 +1,48 @@
 <script setup>
-import { ref } from 'vue';
+import { computed, ref } from 'vue';
 import { useI18n } from 'vue-i18n';
 
 import Button from 'dashboard/components-next/button/Button.vue';
 import DropdownMenu from 'dashboard/components-next/dropdown-menu/DropdownMenu.vue';
+import { usePolicy } from 'dashboard/composables/usePolicy';
 
 const emit = defineEmits(['add', 'import', 'export']);
 
 const { t } = useI18n();
+const { checkPermissions } = usePolicy();
 
-const contactMenuItems = [
+const contactMenuItems = computed(() => [
   {
     label: t('CONTACTS_LAYOUT.HEADER.ACTIONS.CONTACT_CREATION.ADD_CONTACT'),
     action: 'add',
     value: 'add',
     icon: 'i-lucide-plus',
   },
-  {
-    label: t('CONTACTS_LAYOUT.HEADER.ACTIONS.CONTACT_CREATION.EXPORT_CONTACT'),
-    action: 'export',
-    value: 'export',
-    icon: 'i-lucide-upload',
-  },
-  {
-    label: t('CONTACTS_LAYOUT.HEADER.ACTIONS.CONTACT_CREATION.IMPORT_CONTACT'),
-    action: 'import',
-    value: 'import',
-    icon: 'i-lucide-download',
-  },
-];
+  ...(checkPermissions(['administrator', 'contact_manage'])
+    ? [
+        {
+          label: t(
+            'CONTACTS_LAYOUT.HEADER.ACTIONS.CONTACT_CREATION.EXPORT_CONTACT'
+          ),
+          action: 'export',
+          value: 'export',
+          icon: 'i-lucide-upload',
+        },
+      ]
+    : []),
+  ...(checkPermissions(['administrator', 'contact_manage'])
+    ? [
+        {
+          label: t(
+            'CONTACTS_LAYOUT.HEADER.ACTIONS.CONTACT_CREATION.IMPORT_CONTACT'
+          ),
+          action: 'import',
+          value: 'import',
+          icon: 'i-lucide-download',
+        },
+      ]
+    : []),
+]);
 const showActionsDropdown = ref(false);
 
 const handleContactAction = ({ action }) => {
diff --git a/app/policies/contact_policy.rb b/app/policies/contact_policy.rb
index cd199012f..bb01ccde4 100644
--- a/app/policies/contact_policy.rb
+++ b/app/policies/contact_policy.rb
@@ -51,3 +51,5 @@ class ContactPolicy < ApplicationPolicy
     @account_user.administrator?
   end
 end
+
+ContactPolicy.prepend_mod_with('ContactPolicy')
diff --git a/enterprise/app/policies/enterprise/contact_policy.rb b/enterprise/app/policies/enterprise/contact_policy.rb
new file mode 100644
index 000000000..a11898007
--- /dev/null
+++ b/enterprise/app/policies/enterprise/contact_policy.rb
@@ -0,0 +1,9 @@
+module Enterprise::ContactPolicy
+  def export?
+    @account_user.custom_role&.permissions&.include?('contact_manage') || super
+  end
+
+  def import?
+    @account_user.custom_role&.permissions&.include?('contact_manage') || super
+  end
+end
diff --git a/spec/enterprise/policies/contact_policy_spec.rb b/spec/enterprise/policies/contact_policy_spec.rb
new file mode 100644
index 000000000..7dbc837a5
--- /dev/null
+++ b/spec/enterprise/policies/contact_policy_spec.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe 'Enterprise::ContactPolicy', type: :policy do
+  subject(:contact_policy) { ContactPolicy }
+
+  let(:account) { create(:account) }
+  let(:contact) { create(:contact, account: account) }
+  let(:custom_role) { create(:custom_role, account: account, permissions: ['contact_manage']) }
+  let(:agent) { create(:user) }
+  let(:account_user) { create(:account_user, user: agent, account: account, role: :agent, custom_role: custom_role) }
+  let(:agent_context) { { user: agent, account: account, account_user: account_user } }
+
+  permissions :export? do
+    context 'when agent has contact_manage permission' do
+      it { expect(contact_policy).to permit(agent_context, contact) }
+    end
+  end
+
+  permissions :import? do
+    context 'when agent has contact_manage permission' do
+      it { expect(contact_policy).to permit(agent_context, contact) }
+    end
+  end
+end