Roles & permissions
Permissions are enforced via the central RBAC matrix (GET /auth/permissions). Operators can send documents and manage webhooks; billing_viewer reads billing; read_only is view-only plus privacy export. Cross-tenant access is denied except for superadmin.
Help articles never claim live Peppol connectivity from the sandbox.