For full access to EnGage, the only user role required is Network Admin. Assigning additional roles will not add any permissions beyond what the Network Admin role already has (With the exception of OnSite roles)