Trainees must understand the difference between an "Operator," "Supervisor," "Engineer," and "Maintainer" role. The deep exercise involves configuring a user who can download logic to a controller but cannot modify alarm setpoints – a granularity that prevents accidents.