Click the Exhibit button to begin. When you installed the eDirectory tree, your Admin user object was automatically assigned all entry rights to the tree root. What rights does Admin have to the DA1…

Browse alone represents only a minimal subset of rights; Admin's inherited Supervisor assignment grants far broader access than a single Browse right.

Supervisor alone is an incomplete representation; the effective rights also include Browse, Delete, and Rename on a leaf object.

Admin holds all entry rights at the tree root, including Supervisor, which inherits down to the DA1 Server object granting Supervisor, Browse, Delete, and Rename. Because DA1 is a leaf object - a Server object cannot contain child objects - the Create right (which only applies to containers) and the Inheritable flag are not relevant and are therefore not listed in the effective rights.

This set omits the Supervisor right, which Admin does hold through inheritance, and incorrectly includes Create, which does not apply to leaf objects.

This set omits the Supervisor right and incorrectly includes both Create and Inheritable, neither of which is applicable to a leaf Server object.

Create and Inheritable are included here but do not apply to leaf objects such as a Server object, making this set incorrect.

Admin does have rights to DA1 because the Supervisor right assigned at the tree root inherits down to all subordinate objects in the tree.