Every LDMS user has both a "Role" and a "Scope" assigned to their user account.
A user's "Role" determines what actions they can take against a managed device.
A user's "Scope" determines what devices a user can see in the console and/or take action against.
Below is a link to the matrix which details each LDMS user type and applicable role and scope.