The Account Console supports different user roles. Under the user tab in Account Console it is possible to review the permissions the different roles have.
Below is a short summary of the different roles. The role permissions restrict access in Account Console and in the XML-RPC API when userid is included in a call.
Read only users can view all media and statistics. However they cannot make any changes to the account. The only exception is that they can still modify owned media in case they actually own any media.
Note that Read only users can copy embed codes of the content they view and therefore publish them.
Producer users can upload media, create live broadcasts. They can modify and delete their media and live broadcasts. However they cannot change the moderation of their media. This means a producer user needs another user to get their media visible through channels relying on media being public.
The producer user cannot view any other media than their own, cannot view statistics and cannot change the account settings.
Note that although Producer users cannot change moderation they can still copy embed codes of their media and therefore publish them.
The user role has the same permissions as the producer, with the difference that the user role is allowed to change moderation of their content.
Publisher users can see and edit all media from all users. They can also view all statistics.
However they cannot delete media that is not their own. Also they cannot manage the account settings or users.
Administrator users have all permissions available on the account. Only an Administrator can change XML-RPC IP whitelists and create AJAX tokens in the Account Console.
The Admin user is an Administrator that is used by Screen9 support if they need to access an account.