Administrator: If you configure a user to have the Role value of "Administrator" the system permits the user full access to all objects and configuration.

Standard User: If you configure a user to have the Role value of "Standard User" the system permits the user limited write access.  Standard users cannot create or edit vDCs or users.  Standard users can alter vApps, vApp Networks, and VMs that they themselves create (i.e. own), and also those configured as "shared."  Standard users cannot alter vApps, vApp Networks, and VMs owned by others unless the objects are configured as "shared."  Standard users can change their own passwords.

Read Only: If you configure a user to have the Role value of "Read Only" the system permits the user to log in and view many aspects of vApps and VMs, though not all networking details.  In addition, such users can obtain console access to VMs.  Read-only users can also change their own passwords.