The Vault Admin is the highest administrative role within a Vault. The Vault Admin has unlimited permissions on the content of the Vault and the roles & users. The Vault Admin can invite fellow Vault Admins.
The Vault Admin can create lower roles. These roles can be granted certain permissions. Every created role can be limited to a document level. Below image shows which permissions can be granted to the different role types.
A Project Admin role can get all content permissions, but can be limited. Users in a Project Admin role can create and manage lower roles (Content Admin and Guest) and invite users in these roles.
Example for a Project Admin role: Users in this role can manage the complete Vault, but cannot have access to a certain folder.
A Content Admin role can get all content permissions, but can be limited.
Example for a Content Admin role: Users in this role have to upload documents, but don't need to manage roles and permissions.
A Guest role can get View Online, Download secured PDF and Download original permissions and can be limited to a document level.
Example for a Guest role: Users in this role are representing a potential buyer group and may view all documents in the Vault.