PiNet supports two levels of user permissions.
On the Raspberry Pis themselves there are very few differences between the two permission levels.
On the server though is a different story.
Staff have full access to PiNet control panel, Epoptes control panel and are administrators (sudo) on the server.
Members of the staff group should keep their login credentials secure and use a strong password.