Customer needs to have a permission set for each tools in the attachments toolbar :
1 permission set for Approval Process
1 permission set for Corrective and Preventive Actions
1 permission set for Documents
1 permission set for Non conformance Report
1 permission set for Media

With that structure of permission sets, they can manage the access to the attachments toolbar for each user and what tools they will have access to. But they are getting an error when we trying to build that structure. As an example the permission set for Approval Process :

To use the approval process they have granted the permission for the below the activities.

But when they open the approval process tool, they are getting the below security error and you can also see that they have access to the corrective and preventive actions tool.

They have granted permission for Managecapa, but still getting the same error.