3.2

Table Of Contents
Guidelines for User Management
144
3. If there are no inherited permissions, the server checks the global user rights. In this case, the
server determines what role the user has from the CCS settings.
4. In case of a conflict where the evaluation sees a user with multiple roles, for example:
- the user has the read role through one group
- the user has the read/write role through another group
then the highest ranking role wins. In this case, the user gets the read/write role.
This is an example of an accumulated inherited role. The user’s overall role for the database is
the highest role he or she is assigned to in any group, unless otherwise specified in the Manage
Database Roles view. For example: If User A is in Group 1 (which is assigned a Read role) and
User A is also in Group 2 (which is assigned a No Access role), then User A has the accumulated
inherited role Read. When you select User A in the User Management view, this role is displayed
in the Roles pane.