Users have no special permissions. They can access dashboards, and may be given permission to edit Monitoring and Alerting configuration.
[ui!] Project Managers
Projects Managers have tenant-admin access to all dashboards on project sites, including monitoring and alerting configuration.
Tenant admins have permission to access all dashboards. They also have special privileges to access the User Management Console which allows them to add/edit/delete users and their permissions. The role they are assigned is called tenant-admin.
[ui!] developers have full access to all project realms and project dashboards. They are given the Administrators role for access to Control and Analyst. They also have permissions to create realms for new projects. They are authenticated by the master realm and have the role manager.