Yes, you can set specific access permissions (roles) at both Workspace and Room levels.
At the workspace level we have Admin, Member and Guest roles.
At the room level we have Owner, Editor and Reader roles.
Guests at the workspace level can only ever be Readers at the room level. This way it's easy to ensure external people can only access explicitly what they're allowed to access.