How does Careersome decide what I can see and do?

Access requires two things together: your role must permit the action, and your organization's plan must include the underlying module. This is enforced on the server, on the actual routes and APIs, not just hidden in the interface.