If it set up correctly, make sure that:for profiles and custom
resources, you created the org unit and you're populating the profiles
or schemas with the org unit.for other objects, you need to set up the
access authorization in the object settings (screenshot of a workflow
below)