Users can be licensed in three roles: full control, read only, and external access. This applies in principle to both, the DAM and the publishing solution, but with DAM access always being the precondition for publishing access.
Overview of the licensing model: