Roles & Permissions

Roles

Role	Capabilities
Operator	Full `/admin/`, `/api/operator/`, license activation, platform settings
Tenant owner	`/dashboard/` + tenant-scoped `/api/v1/` actions for their tenant
Viewer	Storefront, membership-gated playback, profiles, watchlist
Anonymous	Marketing/legal; blocked from auth-gated catalog routes

/?__theme_preview= only merges for admin-signed-in operators. Anonymous users never receive preview merges.