The role in practice
An employee may need access to an entrance, while only an owner may export a recording. A broad role for everyone does not fit that.
User rights make a system more manageable and limit unintended access to sensitive images or settings.

An employee may need access to an entrance, while only an owner may export a recording. A broad role for everyone does not fit that.
Determine for each person which camera channels, promotions, and times are required. Also check whether temporary access ends automatically or must be revoked by a manager.
Create separate roles for viewers, administrators, and incident handling if needed. Do not grant configuration permissions because that seems to be the fastest way to resolve an app request.
Test with one account from each role and record the results. Review rights periodically when residents, staff, or external suppliers change.
That is a separate right that you can consciously grant.
An export may contain personal data and requires a clear reason and authorization.