Site-level permissions. These permissions are granted to users. For example, they can allow a user to add and manage apps or to remotely wipe managed devices. Only a user with the site-level permission Manage Admin Permissions is able to define/restrict the permissions for other users. See also Overview of Site-Level Permissions.

Application-level permissions. These permissions are defined individually for single apps. They can be granted to users and user groups. As a rule, all users have the permission to download stable versions of an app. But it is also possible to allow one or more users, for example, to change the metadata of an app (this includes the icon and description), to add or remove versions of an app, or to trigger the removal of an app on managed devices. See also Overview of Application-Level Permissions.