...
Moving forward, for the remainder of this KB “Permissions” will refer to permissions within the GlobalSearch application, not in reference to Windows system security permissions or Windows GP.
Implicit vs. Explicit Permissions and Permission Inheritance
Permissions can be assigned to groups or individual users. When a group is secured, all users in that group gain the permissions of the group, implicitly. This is Permissions Inheritance or Implicit Permission. It means that users, by way of being part of a group, naturally gain the rights and privileges of that group. Upon logging into GS, a user is checked for group membership first and assigned the privileges and rights for that group on a case by case basis. If that group’s membership permissions change, so will that user. THIS MEANS THE USERS DO NOT NEED TO BE SECURED IN ANY WAY TO GS. DOING SO WILL GIVE EXPLICIT PERMISSIONS TO THAT USER. (See below)
...
Most importantly though FUTURE PERMISSION CHANGES TO GROUP A WILL NO LONGER AFFECT JDOE since he is no longer associated with GroupA as far as GlobalSearch is concerned.
Multiple Group Membership & Conflicting Permissions
If a user is part of multiple groups secured to the same discrete permissions set, GlobalSearch will attempt to combine permissions sets to give the user the union of the two permissions sets.
...