Permissions by role in each workspace