| Project Admin | Everything within the project. Bypasses every project-scoped permission check. Cannot grant Project Admin to anyone else. |
| Asset Manager | Project-wide read-only observer. Reads fleet data (Service Book, Wheel, Assets, Defects, Measurements, KPI, Types), warranty, inspections and reported defects. May write warranty comments and upload warranty documents, but changes no other state. Asset edits remain Project Admin only. |
| Warranty Manager | The owner side of warranty work: file, submit, close and reopen claims and groups. Reads the warranty area only. |
| Warranty Supplier | The supplier side: investigate, accept, reject. Normally an external party. Reads the warranty area only. |
| Component Manager | The component repair loop: move components between repair states, add repair comments, upload documents. Reads the component repair area only. |
| Inspection Manager | Create and manage inspection templates and reports, and assign inspectors. Reads the inspection area only. |
| Inspector | Submit findings on the reports they have been assigned to. Reads the inspection area only. |
| Planner | Maintenance planning: create and edit plannings, drag planned work around the schedule, and maintain the manhour and cost estimates on tasks. Reads the planner area only. |
| AI Analytics User | Use Ask AI. |
| Defect Reporter | Report defects in the reporter app: create, edit and submit their own reports. Reads the vehicle list and product-group trees needed to do so. Has no section in the web application. |