Devices can belong to more than one device group, and each group can specify a different set of group access rights. When a device exists in multiple groups, the group access rights from all of the groups are added together to determine the rights granted to a user when accessing the device. This means that if a device is granted a right (Device Read, for example) in one group, it has that right from every group to which the device belongs.
The table below demonstrates the effective rights granted to a user accessing a device that exists in three groups that each have different group access rights.
|
Device Read right |
Device Write right |
Rights granted in Group A |
X |
|
Rights granted in Group B |
|
X |
Rights granted in Group C |
|
|
Effective rights when accessing device from any group |
X |
X |
In this example, the device is granted Device Read by its membership in Group A and Device Write by its membership in Group B. The result is that the user can access the device with full rights from any device group to which the device belongs, even Group C where no explicit rights are set.