All users can add attachments and delete the attachments they added themselves. In order to be able to change the document type and delete attachments added by other users, additional authorization is required. On the role form tab Other access rights, there is the option "Manage appendices" that gives the role the right to do this.