DAM
1.5.3. General access
Like other modules you have to grant access to the media modules. This can be done in the backend users record or the records of the usergroup the user is a member of.

In the usergroup record you can define with the exclude fields to which fields of the DAM record the usergroup shouldn't have access to.