If a user is a member of a group, what happens when you change their individual permissions?

If a user is a member of a group, what happens when you change their individual permissions?

• A. Group permissions remain in effect and cannot be overridden by personal permissions.
• B. Personal permissions override group permissions.
• C. Permissions are merged but group permissions still apply; individual permissions cannot override group permissions.
• D. User loses all permissions until re-evaluated.

Answer: (C)

Permissions for a user are determined by combining what they inherit from groups with any permissions granted directly to them. The system doesn’t choose one source over the other; it merges the two. Importantly, permissions granted via a group remain in effect and cannot be canceled or lowered simply by adding personal permissions. In practice, if a group gives a user Edit rights, that higher level remains—even if you also set a personal permission that is lower. If the group doesn’t grant a particular permission, the user’s own explicit permission can still apply. So the final access reflects a merge where group permissions stay in play and personal permissions don’t override them. This is why the best choice describes merged permissions with the group still applying and personal permissions not able to override that group-level permission.

Permissions for a user are determined by combining what they inherit from groups with any permissions granted directly to them. The system doesn’t choose one source over the other; it merges the two. Importantly, permissions granted via a group remain in effect and cannot be canceled or lowered simply by adding personal permissions. In practice, if a group gives a user Edit rights, that higher level remains—even if you also set a personal permission that is lower. If the group doesn’t grant a particular permission, the user’s own explicit permission can still apply. So the final access reflects a merge where group permissions stay in play and personal permissions don’t override them. This is why the best choice describes merged permissions with the group still applying and personal permissions not able to override that group-level permission.