These permissions are specific to the Audit that the user was added to, and what role they were given.

If the user has not been added to the Audit then they will not be able to see the Audit.