Give people the access they need. Library access, account roles and playback limits control different things.
Roles and limits
Open Settings → Server → People → Accounts and select a username to review the person’s role, libraries, stream limits, content restrictions, downloads, Live TV access and viewing hours.
Administrators can manage the member accounts and devices below their role. The owner controls server-wide configuration and actions reserved for ownership. Promoting someone to administrator doesn’t make them the owner.
Keep risky actions restricted
Take extra care with file deletion, file management, library administration, account administration, remote-access configuration and backups. File deletion also needs to be enabled for the library.
Support export under Settings → Server → Troubleshooting is an owner-only action. There isn’t a separate per-person “diagnostics export” permission to switch on. Backup creation, restore and deletion are also owner-only.
Recording permission is separate from Live TV viewing. Under Settings → Server → Live TV & Channels → Recording → Who can record, choose the accounts and profiles that may schedule recordings. The owner isn’t granted recording permission automatically.
The server makes the decision
The server checks access on every library and administrative request. A hidden button isn’t the security check. Saved items and old sessions don’t grant permission to content that is no longer allowed.
Review access when a person’s responsibilities change and when you enable a feature such as downloads or Live TV. Test restricted access with a normal viewer account.