Access controls who can do what inside your workspace. Set who edits roles, who publishes policies, who sees finance, who manages the public page. The default split — viewers, contributors, admins — covers most teams. Adjust it at Settings → Access if your structure is more specific.