otherwise the answer is "they don't have access yet according to spicedb"