Item access
A role answers for a whole area. Item access narrows one thing in it: a single persona, a single project. When you restrict an item, only the members you name, and admins, can see it. You can lift the restriction again. When an item is moved to another workspace, its restriction moves with it.
Tech Detail
The stack of Teams, organizations and access