Access is granted per company and per data area — never by default.
New accounts start with no data access until a group admin grants it.
Group HubGroup Hub