Roles for access are assigned through EWC IAM. Please check EWC Service Related Roles page here.