Understanding group-based permissions

Groups provide a mechanism for applying a consistent set of permissions to multiple users without requiring individual configuration for each user.

Key behaviors of group based permissions:

• When a user is assigned to a group, the permissions defined by the group are applied to that user.
• Group permissions take precedence over individually assigned permissions.
• Permissions granted by a group are visually indicated in the permission assignment screens, distinguishing them from direct assignments.
• Administrators can add additional individual permissions for items not covered by the group. For example, if a group grants five permissions, an administrator can manually add a sixth individual permission that is not part of the group definition.
• If a user is assigned to a group, the individual permission controls for items already covered by the group are disabled to prevent conflicting assignments.