Administrator

The Administrator covers everything inside the organization except the organization itself. It holds full access to every resource class, and to the rest of the organization: members, audit logs, data residency, and both the resource and inventory legal hold.

The Organization permission is the one exception, and an Administrator has no access to it. This means the organization settings are out of reach entirely, neither visible nor editable. An Administrator administers what the organization contains and the members using it, but not the organization itself. Like the Owner, it holds nothing in the deployment family.

Organization

Resources

Deployment