The Vault Admin is the highest administrative role within a Vault. The Vault Admin has unlimited permissions on the content of the Vault and the roles & users. The Vault Admin can invite fellow Vault Admins.
The Vault Admin can create lower roles. These roles can be granted certain permissions. Every created role can be limited to a document level. Below image shows which permissions can be granted to the different role types.
A Project Admin role can get all content permissions, but can be limited. Users in a Project Admin role can create and manage lower roles (Content Admin and End User) and invite users in these roles.
Example for a Project Admin role: Users in this role can manage the complete Vault, but cannot have access to a certain folder.
A Content Admin role can get all content permissions, but can be limited.
Example for a Content Admin role: Users in this role have to upload documents, but don't need to manage roles and permissions.
An End User role can get view, print and download permissions and can be limited to a document level.
Example for an End User role: Users in this role are representing a potential buyer group and may view all documents in the Vault.