Access is role-based and set per organization. Anything a role can't do is also blocked by the server, not just hidden.
| Capability | Member | FleetUser | FleetManager | Admin |
|---|---|---|---|---|
| See the fleet and the apps | Yes | Yes | Yes | Yes |
| Open a station's detail page and its log | No | Yes | Yes | Yes |
| See Activity (visitor conversations and transcripts) | No | Yes | Yes | Yes |
| Act on stations (claim, rename, assign apps, message, settings, reboot, remote access, collect logs and screenshots) | No | No | Yes | Yes |
In short: a Member can see the fleet's state, a FleetUser can investigate but not change anything, and a FleetManager or Admin can do everything within their organization.