The default superuser role has access to entire Chargeback application. The administrator role has access and permissions to resources that are assigned by the superuser. Similarly, users created in less privileged roles by administrators are visible only by those administrators. For example, administrator A1 does not have access to users created by administrator A2. With this in mind, administrators should carefully create and assign roles and privileges. This extends to LDAP users and groups as well.