Multi-generational Access Control permission interactions

When you limit the open or edit rights for multi-generational System Admin and Digital Factory Toolset tabs, there are permission interactions. This table shows how the open and edit rights that you grant/deny for first-level tabs and their second-level children tabs interact to affect what users can see and edit.

Tab Permissions				Admin Rights Interaction Effects
First-Level (Parent) Tab		Second-Level (Child) Tab
Open	Edit	Open	Edit
X	X	X	X	Can see and edit both the parent and the parent/child relationship.
X	X	X	-	Can see both the parent and child. Can edit the parent but cannot edit the child.
X	X	-	X	Can see and edit both the parent and the parent/child relationship
X	-	X	X	Can see both the parent and child but cannot edit the parent or the parent/child relationship.
-	X	X	X	Can see and edit both the parent and the parent/child relationship.

For example, the folloiwng table shows the interaction effects for the Groups and Members tabs, which are multi-generational tabs in the System Admin Toolset System Administrator tool.

Tab Permission				Admin Rights
Groups		Members
Open	Edit	Open	Edit
X	X	X	X	Can: See groups. Edit groups. See user membership for each group. Edit user membership for each group.
X	X	X	-	Can: See groups. Edit groups. See user membership for each group. Cannot edit user membership for each group.
X	X	-	X	Can: See groups. Edit groups. See user membership for each group. Edit user membership for each group.
X	-	X	X	Can: See groups. See user membership for each group. Cannot: Edit groups. Edit user membership for each group.
-	X	X	X	Cannot access group or membership data at all, that is, cannot: See groups. Edit groups. See user membership for each group. Edit user membership for each group.

The following table shows the interaction effects for the Deployment Data and Currency tabs, which are multi-generational tabs in the Digital Factory Toolset Deployment Data tool.

Tab Permission				Admin Rights
Deployment Data		Currency
Open	Edit	Open	Edit
X	X	X	X	Can: See deployment options. Edit deployment options. See currency for each deployment option. Edit currency for each deployment option.
X	X	X	-	Can: See deployment options. Edit deployment options. See currency for each deployment option. Cannot edit currency for each deployment option.
X	X	-	X	Can: See deployment options. Edit deployment options. See currency for each deployment option. Edit currency for each deployment option.
X	-	X	X	Can: See deployment options. See currency for each deployment option. Cannot: Edit deployment options. Edit currency for each deployment option.
-	X	X	X	Cannot access deployment or currency data at all, that is, cannot: See deployment options. Edit deployment options. See currency for each deployment option. Edit currency for each deployment option.