Roles: PLATFORM_ADMIN , TEAM_OWNER , DEVELOPER , VIEWER . Owners manage billing links, invites, and API tokens. Viewers cannot see secret values.