The access control features in Workspaces make sure that users can only see and manage campaigns that they should see, even if those campaigns are in a workspace.
How it works
In Workspaces all campaigns belong to an ad account. In order to see and open a workspace, a user must have access to the ad accounts used in the workspace.
When dividing your campaigns into Workspaces, make sure that the division makes sense for the users' tasks. In a single workspace, only include campaigns for those ad accounts that the user is supposed to manage.
This way the relevant users have access to all the ad accounts being used in a specific workspace.
If an ad account is removed, your company's Smartly admins should remove any campaigns that belong to it - if it is unpublished or published archived, it can be just deleted. If it is a published non-archived campaign you need to send it to another Workspace to restore access for other users.
Meta-specific information
A single Workspace within Meta can include campaigns from multiple ad accounts. In order to see and open a workspace, a user must have access to all the accounts used in it.
Visibility for Smartly admins users: company admins have the unique ability to view all workspaces, regardless of the individual account permissions.
Note on current limitations: for now the new access control features do not take into account campaign defaults and Bundles+.