What permissions do the different user roles in Opscompass grant?

When a new user is invited to Opscompass they come in as a "user" with the lowest permissions, but can be assigned roles from an administrator from the list below:

• User - has basic access in Opscompass, including seeing drift, inventory, and compliance problems, creating mitigations and exceptions, and connecting additional cloud accounts. 
• Database Manager - can download scripts and update license entitlements, configurations, and secrets.
• Administrator can link companies, invite users, create teams, assign document permissions, access all directories, manage compliance checks, and delete the company.