How should data models work for multi-user shared devices?

Model device identity separately from user accounts, then attach people through roles and memberships. Admins may change configuration, while operators may only view run data, and every setpoint change needs an audit trail. For a shared gateway, cloud membership keeps history intact when a technician changes phones.