Why can some users not edit an entity despite having the required features and workgroup/billing office access?

1 - Further access restrictions can be configured for each workflow status. Check the workflow definition to see if a certain state is reserved only to certain users or roles.

2 - For some entities, like engagements/contracts, access can be manually restricted to a list of named users.

For more details, please check the dedicated security access guide.