costeo controls access at two separate levels. Understanding the difference between them is essential before assigning access to anyone.
Note: A high organization role does not automatically grant full access inside every project, and a permissive project preset does not grant administration rights. There is also a separate project-level Admin toggle applied when a member is added to a project — see section 5.14.5 — so in practice three controls interact.