Why can a member access this?

On Team Settings → Members, the Why? button shows why a member has (or lacks) a given permission: their role grants it, a custom permission, owner status, or a switched-off module rules it out. A quick way to find where an access comes from.