Hi cyrus, 

There is a permission for ViewSessionGuestScreenshot that is separate from the ability to join an access session. Please review role permissions to make sure these permissions are set appropriately.