Administrator has full access. They can do everything including adding and removing users and changing user levels.
Approver can action exceptions and rebuttals and can invite additional internal users to join ISO.
Collaborator can comment and see exceptions but can't action them.