This example illustrates how permissions assigned directly to an individual user override permissions assigned to a group that the user is a member of.

In this example, permissions are assigned to a user and to a group on the same object.

Role 1 can power on virtual machines.

Group A is granted Role 1 on VM Folder.

User 1 is granted No Access role on VM Folder.

User 1, who belongs to group A, logs on. The No Access role granted to User 1 on VM Folder overrides the group permission. User 1 has no access to VM Folder or VMs A and B.

Example 3: User Permissions Overriding Group Permissions
An example of user permissions overriding group permissions.