Access is layered
The signed-in user needs a valid role and active workspace membership. Customer assets are resolved and checked server-side. A navigation link or known numeric ID does not confer permission.
Conceptual authorization diagram; not a product screenshot.
When access is denied
Confirm your account, active workspace, membership state and the asset owner. Ask an authorized Owner to review permissions rather than sharing another user’s session.