OTBI Data Security - Assets

Do all Oracle saas ERP modules follow data access/role security for access to data. I have a user who has assets data availabiilty but does not have an assets role. Thank you.