The role on a UserTenant record sets a user's organization-wide access level — for example, whether they can manage users and settings across all sites or are restricted to viewing data. This is the tenant-level role and is separate from the per-site role found on SiteAccess records. Admins assign the role when inviting or editing a member, and it can be changed without creating a new membership.
Technical section
Data model, API, and internals — visible to developers.