admin: manage the organization's users (create, ban, unban, delete, revoke sessions, change roles), issue API keys, manage device connections, read telemetry and alarms.operator: manage device connections, read telemetry and alarms.viewer: read telemetry and alarms only."admin"