Pelion LwM2M Access Control vs SDA

I understand Pelion is implementing the spec OMA-LwM2M. What I do not understand though is the management of the Access Control. According to the specs a device has Access Control to manage access from an LwM2M Server.
On the other hand Pelion’s Device Management implements the SDA. Since with SDA you control access from Users while with Access Control you control access from LwM2M Server to me they are different concepts. Am I right? If yes, how does Pelion reflect the spec for Access Control?

thanks lot.