When base objects and resources have user role privileges, the business entity inherits those privileges. To access business entity records, the user role must have the appropriate privileges to the root base object for the business entity as well as other resources.
The business entity services also inherit any data filters that you set on business entity fields.
For more information about security and data filters, see the