...
The Cloud Admin has a full set of icons on the main menu bar. The Cloud Admin can create enterprises and users, and manage roles and scopes.
Enterprise Admin access
By default, the Enterprise Admin can manage resources for their tenant or tenants. As an example, if you decide to allow the tenant admin to manage users, then you can give them access to the Users view, but they will have limited access. For example, you can allow them to administer users of their own tenant only, without privileges to manage roles and scopes.
User access
By default, the Cloud User role has only the most basic icons on of the top menu. This user cannot access the other views, including the Users view.
Enterprise viewer role
...