...
Create workspace permission schemes and assign too workspaces. Schemes enables enable full control over who can view and edit workspaces as well as view, edit and delete permissions to individual OKRs. All workspaces has a scheme assigned with the The “all user access“ scheme as defaultis the default scheme creating workspaces.
Private workspaces can only be accessed by the creator and persons invited by the creator. Admins can manage private workspaces such as delete however not view the data.
...
Permission Limitations
BOJA OKR permissions limit user access to app functionality through the BOJA OKR user interface. Permissions are not checked at the database level so users with access to the Jira instance might through “hacking“ and direct API calls gain access.
Please note that access to Jira and monday.com data is protected by those build in permissions.