The user's active credentials (the role, collaborative space, and organization selected when logging in) determines read access to content based on the collaborative space and organization that owns the content. These access rules can be configured to support your business processes.