| Role | What it can do |
| Admin | Full access, including team management and workspace settings |
| Reviewer | Read everything, plus disposition findings, run reviews, and upload documents |
| Viewer | Read-only — write controls are hidden, and mutating actions are refused |