Roles and what they can see

Role	Can	Cannot
Read only	View records	Add or change anything
User (support worker, family)	View, add records; edit or delete their own notes for 24 h	Change others' notes, manage users
Admin	Everything above, plus invite/revoke people and edit reference lists	Change another administrator's role
Super admin	Everything	—

Roles are per care team. Someone can be an administrator for one participant and read-only for another.