Rights and roles for workspaces