how are they granted access within the context of a team?