You can let a guest edit some data on the default workspace (out of group). This is reserved for demos and needs groups to be disabled or to be visible.

Guests are constrainted just as students by the "entity by entity" enablers in the module configuration.