We send update requests to "outside" unlicensed, one-off, recipients. I have the base sheet in a Workspace. Occasionally, I find a few outside users have granted themselves sheet permission. Did they inherit the admin or owner permission from the workspace? Should this sheet be moved out of a workspace?