Roles and what each can do

4 roles, listed under the roster on the Team tab. Each card carries a one-line summary and 2 lists: what that role can do, ticked, and what it cannot, crossed out. This is that same table, with the reasoning.

What you need: the Team tab in Settings. Everyone can read the role cards; changing somebody's role needs owner or administrator.

Screenshot to come

The four role cards showing what each role can and cannot do.

Suggested image Screenshot of the What each role can do section: the four cards in a two by two grid, each with its role badge, one-line summary, ticked can items and crossed cannot items.

Owner

One per location. Everything an administrator can do, plus the money and the location itself.

Can: billing, plan and invoices; transfer ownership; delete the location.
Cannot: the owner card carries no cannot list. Nothing in the location is withheld.

The owner row cannot be edited or removed from the roster. Ownership moves by transfer on the Danger zone tab, which swaps the 2 people: the new owner takes billing, and you drop to administrator.

Administrator

Runs the location day to day, without the money.

Can: connect and refresh sources; manage locations; invite and remove members; set up rules and agents.
Cannot: see billing or invoices.

This is the role for the person who actually owns the setup. They can break things and fix them, which is the same permission, so hand it to somebody who will be around.

Manager

Owns the rules for the part of the business they are given.

Can: create and edit rules; answer, assign and approve reviews; see insights.
Cannot: change agents; invite members; connect sources; see billing.

A manager is the right answer for a team lead who should be able to change what the rules do but not who is in the room or which sources are attached.

Moderator

Answers reviews, and sees nothing that could change how automation behaves.

Can: reply, copy and mark replied, assign, archive, and approve or discard drafts.
Cannot: change rules or agents; invite members; see billing.

Someone answering 100 reviews a day should not be able to change the rule that decides what reaches them, because a mistake there is invisible from the feed.

Location access, on top of the role

A manager or moderator reaches only the locations picked for them. It narrows everything: the reviews feed, Approvals, insights, exports and the report. See Locations.

With nothing picked, they reach no location, so pick at least 1 when you invite them.
The locations you do not pick do not exist for them. They will not see those reviews, those numbers, or the fact that those locations exist.
Owners and administrators always reach every location, including ones added later.

Where the roles show up elsewhere

Insights puts the role next to each name on the team productivity table, so a slow average on a moderator reads differently from one on a manager.
Notifications shows a second column, "Everyone", only to an owner or administrator. That column sets the account default; each person still controls their own on top of it.
Billing is on the rail for the account's owner. Working inside an agency's location, the tab says the plan is managed by your provider rather than pretending to be a screen it does not own.

Roles cost nothing and are not limited by plan. Add as many people as the work needs. See What uses your credits, under Billing.