- Owner
- Settings, roles, ownership transfer, archiving, verification requests
- Maintainer
- Edit the profile, publish updates, manage roadmap, repositories and deployments
- Grant manager
- Manage grant records and submit reports; cannot approve their own deliverables
- Contributor
- Submit evidence where authorized
- Viewer
- Read access, including members-only entries
Every role change is recorded in the audit log and the project manifest.