PROVA has five roles. Most people have exactly one.
Owner
The person who created the organisation. Owners can do everything: add sites, invite people, change roles, manage billing and see every site's progress. There is one Owner per organisation, and the role can be transferred.
BRP (Business Responsible Person)
The senior person accountable for Martyn's Law compliance across the organisation. BRPs see all sites, receive reminder notifications when things are overdue, and can complete assessments and plans for any site. The Owner can delegate the BRP role to someone else.
Premises Controller (PC)
The person responsible for a specific site. PCs complete that site's assessment, build its plans, assign mitigation tasks and invite site staff. A PC only sees the sites they're assigned to. Each site needs one PC, and the same person can be PC of several sites.
Billing Admin
Manages the subscription and site licences. Billing Admins see billing and organisation settings but not the day-to-day assessment work. The Owner can delegate this role.
Site Staff
Employees or volunteers at a site who need training. Site staff only see the Training Portal: their videos, progress and the documents they need to acknowledge. They're invited by the site's PC.
Changing someone's role
Go to Organisation and open the member. The Owner can change any role; removing or converting a Billing Admin needs the Owner's approval.