Owner, Admin, Manager, Staff — plus module-level toggles.

Admin → Users → Invite. Enter the email and pick a role. They get a signed email link to set their password.
Owner has full access including billing. Admin is full access minus billing. Manager has operational access. Staff is limited to day-to-day entry screens.
Admin → Settings → Modules. Turn any module off for a role (e.g. hide 'Payments' from Staff). Settings apply immediately on next sign-in.