Roles & Permissions

Permission	Organization Admin	Organization Member	Organization Guest	Application Member
Invite new organization admins	✔️	❌	❌	❌
Invite new organization members	✔️	❌	❌	❌
CRUD organization members	✔️	❌	❌	❌
Invite new organization guests	✔️	✔️	❌	❌
Accept / Deny join requests	✔️	❌	❌	❌
View all applications	✔️	✔️	❌	❌
CRUD all applications in the organization	✔️	❌	❌	❌
Request production status for connection	✔️	❌ Open issue, PO decision required	❌	❌
View own applications	✔️ (implicit)	✔️ (implicit)	❌	✔️
Create new applications with test connections	✔️ (implicit)	✔️ (implicit)	✔️	❌
CRUD own applications	✔️ (implicit)	✔️	❌	✔️
App membership allowed	N/A	N/A	✔️	✔️ (implicit)

Rights for Sandbox are 100% equal to Production, but new users are provisioned as admin's in organization.