Keep Studio Access Control as a draft until Save, including the master switch. Show referenced apps when editing or deleting an IP policy, and bind workspace policies to apps through the console network access APIs.