What is the primary mechanism for controlling user access to specific features within a Relativity workspace?