If a user belongs to two groups with different security settings and both groups are explicit or inherited, which setting applies to the user?

If a user belongs to two groups with different security settings and both groups are explicit or inherited, which setting applies to the user?

• A. The least restrictive
• B. The most restrictive
• C. The explicit access
• D. The inherited access

Answer: (A)

When a user belongs to multiple groups, the permissions from those groups are combined. The effective access is the most permissive level granted by any of the groups—the least restrictive setting. This means actions allowed by at least one group become available to the user. For example, if one group grants edit and view while another grants only view, the user can edit as well because the union of permissions is applied. (Deny rules can override in some systems, but with explicit or inherited settings described here, the result is the most permissive combination.)

When a user belongs to multiple groups, the permissions from those groups are combined. The effective access is the most permissive level granted by any of the groups—the least restrictive setting. This means actions allowed by at least one group become available to the user. For example, if one group grants edit and view while another grants only view, the user can edit as well because the union of permissions is applied. (Deny rules can override in some systems, but with explicit or inherited settings described here, the result is the most permissive combination.)