On substation level access control can be managed by users who have manage role for organization level or are instance administrators. These users can add new users, who can have either a viewer or an engineer role for this substation. Engineer role means manage.