Every member has one role in each organisation they belong to. Each role can do everything the role below it can.
Viewer
Reads everything in the organisation: the register, obligations, plans, events, alerts, dashboard and reports. Can create a personal calendar feed.
Technician
Does the day-to-day work: adds and edits assets, obligations and plans, records events, acknowledges alerts, and can run an import's dry run.
Admin
Runs the organisation: deletes and restores, bulk actions and their undo, committing and undoing imports, saved views, alert rules, notification channels and delivery history, packs, organisation settings, members, invitations and API keys.
Owner
Everything an admin can do, plus billing: choosing a plan and managing payment. An API key can never be an owner.