Inherited permissions
These are permissions inherited from the resource's parents, meaning the principals (User, Team) has a permission that is relevant to this resource on its parent → and it gets inherited to this resource.
Key characteristics
Cannot be modified from this resource's access window
Must be changed at the parent resource where it was originally set
Can be overridden locally with a Direct Deny (except
admin, which cannot be denied)
How to modify inherited permissions
Option 1: Change at the parent
Navigate to the parent resource's access window
Modify the permission there - changes will flow down to all children
Option 2: Override locally
Use Direct Permissions to set Deny (✖) for specific actions
This blocks the inherited permission even if it's allowed at the parent
admin cannot be denied - inherited admin permissions cannot be overridden with a local deny.
Last updated