Direct permissions are permissions that are assigned directly to a user or group. When users and groups have permission on an object, they can perform administrative tasks on that object if they also have the appropriate privilege. You can edit direct permissions.

Inherited permissions are permissions that users inherit. When users have permission on a project, they inherit permission on all folders and data objects in the project. When groups have permission on a project, all subgroups and users that belong to the group inherit permission on the project. For example, a project has a folder named Customers that contains multiple folders. If you assign a group permission on the project, all subgroups and users that belong to the group inherit permission on the Customers folder and on all folders in the folder.

Effective permissions are a superset of all permissions for a user or group. These include direct permissions and inherited permissions.

Users assigned the Administrator role for a Model Repository Service inherit all permissions on all projects in the Model Repository Service. Users assigned to a group inherit the group permissions.