Administrators and owners only. The role is checked in the database, not in the tool description.
Owners and administrators can invite ordinary members; only owners can invite administrators. Call only after the person has explicitly asked to invite this email address and role. Access starts when the recipient accepts with the matching address.