Multi-generational Access Control permission interactions

When you limit the open or edit rights for multi-generational System Admin and Digital Factory Toolset tabs, there are permission interactions. This table shows how the open and edit rights that you grant/deny for first-level tabs and their second-level children tabs interact to affect what users can see and edit.

Tab Permissions	Tab Permissions	Tab Permissions	Tab Permissions	Admin Rights Interaction Effects
First-Level (Parent) Tab		Second-Level (Child) Tab
Open	Edit	Open	Edit
X	X	X	X	Can see and edit both the parent and the parent/child relationship.
X	X	X	-	Can see both the parent and child. Can edit the parent but cannot edit the child.
X	X	-	X	Can see and edit both the parent and the parent/child relationship
X	-	X	X	Can see both the parent and child but cannot edit the parent or the parent/child relationship.
-	X	X	X	Can see and edit both the parent and the parent/child relationship.

For example, the folloiwng table shows the interaction effects for the Groups and Members tabs, which are multi-generational tabs in the System Admin Toolset System Administrator tool.

Tab Permission	Tab Permission	Tab Permission	Tab Permission	Admin Rights
Groups		Members
Open	Edit	Open	Edit
X	X	X	X	Can: - See groups. - Edit groups. - See user membership for each group. - Edit user membership for each group.
X	X	X	-	Can: - See groups. - Edit groups. - See user membership for each group. Cannot edit user membership for each group.
X	X	-	X	Can: - See groups. - Edit groups. - See user membership for each group. - Edit user membership for each group.
X	-	X	X	Can: - See groups. - See user membership for each group. Cannot: - Edit groups. - Edit user membership for each group.
-	X	X	X	Cannot access group or membership data at all, that is, cannot: - See groups. - Edit groups. - See user membership for each group. - Edit user membership for each group.

The following table shows the interaction effects for the Deployment Data and Currency tabs, which are multi-generational tabs in the Digital Factory Toolset Deployment Data tool.

Tab Permission	Tab Permission	Tab Permission	Tab Permission	Admin Rights
Deployment Data		Currency
Open	Edit	Open	Edit
X	X	X	X	Can: - See deployment options. - Edit deployment options. - See currency for each deployment option. - Edit currency for each deployment option.
X	X	X	-	Can: - See deployment options. - Edit deployment options. - See currency for each deployment option. Cannot edit currency for each deployment option.
X	X	-	X	Can: - See deployment options. - Edit deployment options. - See currency for each deployment option. - Edit currency for each deployment option.
X	-	X	X	Can: - See deployment options. - See currency for each deployment option.Cannot: - Edit deployment options. - Edit currency for each deployment option.
-	X	X	X	Cannot access deployment or currency data at all, that is, cannot: - See deployment options. - Edit deployment options. - See currency for each deployment option. - Edit currency for each deployment option.