What are the workspace roles and what can each do?

Admin — full control, including adding and removing members and deleting the workspace.

Member — publish, share, and edit content; can manage app access.

Contributor — create and edit content, but cannot publish the app or manage permissions.

Viewer — read-only access to content. Row-level security applies to Viewers but is bypassed by Admins and Members.