Roles

The riversync tenant's role set — five configurable roles, managed like any tenant's. What each can do is configured on the Permissions page.
Open permissions
Admin
3 Every permission, always — the tenant's fixed full-permission role. Only admins manage user accounts and roles. All permissions
Support
10 Support inbox, service tickets, customer messaging and audited view-as sessions. View permissions
Sales
6 Quotes and the sales pipeline. View permissions
Accounting
4 Invoices, billing, plans and pricing across tenants. View permissions
Engineer
13 Device telemetry, dispatch, provisioning and maintenance. View permissions
One role per account

Accounts hold one role, assigned on the Users page — the same user management every tenant gets.

Admin is fixed

Admin always carries every permission — its column in the matrix cannot be narrowed. The customer-Owner analogue.