Multi-Generational Access Control Permission Interactions
When you limit the open or edit rights for multi-generational System Admin and VPE Toolset tabs, there are permission interactions. This table shows how the open and edit rights that you grant/deny for first-level tabs and their second-level children tabs interact to affect what users can see and edit.
 
Tab Permissions
Admin Rights Interaction Effects
First-Level (Parent) Tab
Second-Level (Child) Tab
Open
Edit
Open
Edit
X
X
X
X
Can see and edit both the parent and the parent/child relationship.
X
X
X
-
Can see both the parent and child. Can edit the parent but cannot edit the child.
X
X
-
X
Can see and edit both the parent and the parent/child relationship
X
-
X
X
Can see both the parent and child but cannot edit the parent or the parent/child relationship.
-
X
X
X
Can see and edit both the parent and the parent/child relationship.
 
For example, this table shows the interaction effects for the Groups and Members tabs, which are multi-generational tabs in the System Admin Toolset System Administrator tool.
 
Tab Permission
Admin Rights
Groups
Members
Open
Edit
Open
Edit
 
X
X
X
X
Can:
• See groups.
• Edit groups.
• See user membership for each group.
• Edit user membership for each group.
X
X
X
-
Can:
• See groups.
• Edit groups.
• See user membership for each group.
Cannot edit user membership for each group.
X
X
-
X
Can:
• See groups.
• Edit groups.
• See user membership for each group.
• Edit user membership for each group.
X
-
X
X
Can:
• See groups.
• See user membership for each group.
Cannot:
• Edit groups.
• Edit user membership for each group.
-
X
X
X
Cannot access group or membership data at all, that is, cannot:
• See groups.
• Edit groups.
• See user membership for each group.
• Edit user membership for each group.
 
Likewise, this table shows the interaction effects for the Deployment Data and Currency tabs, which are multi-generational tabs in the VPE Toolset Deployment Data tool.
 
Tab Permission
Admin Rights
Deployment Data
 
Currency
 
Open
Edit
Open
Edit
 
X
X
X
X
Can:
• See deployment options.
• Edit deployment options.
• See currency for each deployment option.
• Edit currency for each deployment option.
X
X
X
-
Can:
• See deployment options.
• Edit deployment options.
• See currency for each deployment option.
Cannot edit currency for each deployment option.
X
X
-
X
Can:
• See deployment options.
• Edit deployment options.
• See currency for each deployment option.
• Edit currency for each deployment option.
X
-
X
X
Can:
• See deployment options.
• See currency for each deployment option.
Cannot:
• Edit deployment options.
• Edit currency for each deployment option.
-
X
X
X
Cannot access deployment or currency data at all, that is, cannot:
• See deployment options.
• Edit deployment options.
• See currency for each deployment option.
• Edit currency for each deployment option.