By default, access to tickets to even external staff will not be denied.

If you want to allow access, go to Settings->Configuration->Tickets and define Allow access to tickets to external members of staff on YES.