Admins manage workspace settings, members, integrations, sources, spend, exports, and audit.
Editors create spend, correct spend, import, sync, export, and view audit.
Viewers can view dashboard, spend, and audit logs without mutation actions.
Viewer export stays disabled in V1.