In which component is the access to workspaces controlled?

 Access to workspaces in SAP Build Work Zone is controlled by role collections, which are groups of roles that define the permissions and access rights for users. Role collections are assigned to users or groups in the SAP BTP subaccount cockpit, and they determine which workspaces the users can see and access in SAP Build Work Zone. Role collections can also be used to control the access to applications and content within the workspaces. References:

SAP Build Work Zone, advanced edition | SAP Help Portal, section “Role Collections”

Access SAP Build Work Zone, advanced edition from the SAP Build Lobby | SAP, step 2.2

Deep Dive into SAP Build Work Zone | SAP Blogs - SAP Community, section “SAP Build Work Zone, advanced edition (previously SAP Work Zone service)”