...
user
an Azure AD user can only access the Tenant Overview, Workspaces, Reports, Unity Catalog Migration Assessment and Incidents features of the application
can not modify settings or consumption or telemetry data processing schedules
can access cost and telemetry data on workspaces based on configured access rights
executive
all the rights of usersuser role, plus access to cost and telemetry data on all published workspaces with no access rights restriction
Users with Executive role have access to all cost and activity data with no authorization rules applied
Executive role has no access to modify settings (same as User role).
admin
all the rights of users and executives, plus the ability to configure a Databricks Workspace to be used for analysis by users and executives,
can set license, configure email notifications and incidents policies
billing admin
all the rights of users, plus ability to manage consumption data loading and processing
...