Private Sourcemaps in Sentry

Hello, I’ve read about source maps in Sentry, and the option to host them on a private domain and link them to Sentry, instead of publicly available ones.
I’d like to understand better how that works, especially how do we grant access to Sentry specifically, and yet restrict the average user from accessing it?