Whether the member holds every one of keys in the customer's workspace.
The keys the caller holds in the customer's workspace, and the role they
come from: a member's own role, or for staff the owner's. null when the
caller may not enter it.
The ACTIVE members of the customer who hold one of roleIds or are one
of userIds, and hold every one of requiredKeys. Without roles and
users, no one.
What a member of a customer's dashboard holds, read at call time. An internal role grants nothing. Only
permissionsOftakes a caller; the rest answer about other members, so they check no permission.