You can assign three types of user roles:

1. Admin - has full access rights to all functionality.
2. Orders Manager - has full rights to create and manage orders and invoices.
3. Viewer - has restricted rights limited to view and export for orders and invoices. 

Then, you can also select the media library rights for respective user. User can either have full media library access (meaning is able to upload, edit, remove, and download assets) or limited access (meaning is only able to view and download assets). 

‍