A user or a group may be a member of multiple sets of rights, and it is the cumulative effect of those set of rights that determine which license a user will occupy and what the exact application rights for that particular user will be.
There are three modes of permissions:
- Allow in these rights,
- None in these rights
- Deny in all rights
If Deny in all rights is used, it will effectively block a user from this feature – even if the user is member of another Rights group that does grant him access to the feature.
If None in these rights is used, the current Rights group does not grant user access to the feature. However, if the user is member of another Rights group that does grant access to the feature (Allow in these rights), then the effective user access will be Allow.