Creating a workspace required `read` on site wide `user`. Only organization permissions should be required.