User roles
Every user account has a single role. The role decides how the permission system treats the account before any access group is taken into account.
User (USER)
The default role. A User's access is determined entirely by the access groups they belong to — the permissions and warehouses those groups grant, and nothing more. A User who is in no group can sign in but sees nothing they have not been granted.
Admin (ADMIN)
An administrator. The Admin role bypasses permission checks — the account has full access to every screen and record, regardless of access-group membership or warehouse restrictions. Reserve it for the people who configure the system.
Owner (OWNER)
The account owner. Like Admin, the Owner role has full access and bypasses all permission and warehouse checks. It is the top-level administrative role for the company account.