iTwin Experience users are required to have an iTwin Experience entitlement to access and use the application.
All users who access and use iTwin Experience and its included capabilities will have the usage logged and an iTwin Experience license will be consumed.
The Default Access configured at the Entitlement/Licenses Management service, for every application is Allowed, this means that all the Users in an Organization can use any Entitlement which is available to the organization.
If Everyone is granted access to iTwin Experience, all users who access iTwin Experience and use the capabilities will consume an iTwin Experience license. This includes all capabilities in iTwin Experience such as Inspections and Carbon Analysis.
To prevent this, Default Access for iTwin Experience must be set to Deny. Then administrators can add the users to each entitlement as desired.
The below steps describe how to manage user entitlements within your organization. For additional information on managing entitlement access controls please refer to Access Controls Best Practices.