Creating a membership requires the user to have write permission for the respective workspace. But DM5 does not check this prerequisite.
@irau @jpn @mukil FYI