The admin role can install and remove services, see secrets, approve upgrades, and manage nodes, credentials and users.

The change is recorded in the audit log.