Yes, access can be provisioned independently of the pipeline’s workspaces, and access to the pipeline does not provide access to its associated workspaces.