Vault Admin - Project Admin - Content Admin - End User
A Project Admin role can get all content permissions (UPLOAD, RENAME, MOVE and DELETE), but can be limited. Users in a Project Admin role can create and manage lower roles (Content Admin and End User) and invite users in these roles.
Reports: When granted report permissions a Project Admin can see its own, the Content Admin and End User activities.
Example for a Project Admin role: Users in this role can manage the complete Vault, but cannot have access to a certain folder.