Can a colleague access only one workspace?
Owners choose single-workspace or all-workspace access.
Yes. The owning account can invite a Premium member to one workspace or all of its workspaces. All-workspace access also includes later workspaces created by that account.
Members have full access inside their granted workspaces. Extra permission roles and ownership transfer are not available. Premium allows up to 30 distinct members, including unexpired invitations.