CSDM Alignment - Business and Technology Management Services not selectable from incident

Hello everyone! I feel like I'm missing something obvious in terms of ServiceNow usage, so feel free to point me in the right direction. I wanted to ask here before opening a support request with ServiceNow directly.

I am working on an architectural model for my institution, and am trying to follow CSDM v5. To demonstrate how I understand things will work, I wanted to show how the business services and technology management services could be used in ITSM incident creation and service requests. I wanted to do this by using my personal development instance. 

However, when I went to try and test what a help desk user would be able to do, the system only displayed the demo services included in the PDI - and it reported that security constraints blocked my elements from being viewable. 

My question has 2 parts: 

1. Am I correct in assuming that help desk workers (or customers) would be able to select the business and technology management services when creating an incident, or is there some other mechanism that ties these services to the "Day to day" operations of ITSM?

2. Assuming I'm correct above, can anyone give me pointers on what I'm doing wrong to have the services visible?

Here is the steps I've taken, starting with a fresh personal development instance: 

• Requested a Zurich PDI
• Activated the "ITSM Roles" plugin without demo data (using the Manage instance interface)
• Logged in to PDI as admin
• Used the Application Management dashboard to install the following:
  • Digital Portfolio Management (product)
  • Service Portfolio Management (product)
  • CMDB And CSDM Data foundations Dashboards (plugin)
  • CMDB CI Class Models (application)
• Created and switched to a unique updat set (scope of global)
• Used the "Service Portfolios" view to create a unique service portfolio
• Created 8 nodes under the primary Service Portfolio
• Used the "Service Builder" application to create business services and technology management services
  • All of the services are owned by the "System Administrator" user, and other details are not filled out
  • Most of the services have service offerings under them
  • All services are listed as published
• Switched off of the update set (without completing it)
• Confirmed the admin user could see all business and technology management services when creating an incident
• Created a sample user
• Assigned the sample user to the pre-built "Help Desk" and "Service Desk" groups
• Assigned the role "itil" to the "Service Desk" group
• In a private browsing session, logged onto the sample user
• Accessed the Service Operations Workspace
• Created a new incident
• Attempted to select a non-demo business service or technology management service from the lookup tool and failed.

I should note that initially, I did not set any assignment groups, change groups, or management groups to any of the services or offerings I created. However, this does not seem to be affecting anything. I suspect I am missing some fundamental permission, but I am not sure where to look for that or what controls exactly how the "service" and "Service offering" lookups interact with the Service Builder.