Click the Exhibit button to begin. To ease your administrative workload, you have hired the JCorry user to help you administer your eDirectory tree. You have assigned her user object to be a trustee…

Supervisor was never included in JCorry's trustee assignment on the DA container and cannot appear as an inherited right on subordinate objects.

Inheritable alone is a modifier flag on a rights assignment, not a standalone access right, so listing it by itself does not represent a valid effective rights set.

This omits the Inheritable flag that was explicitly assigned, and the Create right does not flow to leaf objects regardless.

Read is a property right, not an object right, and was never part of the trustee assignment granted on the DA container.

The Create object right does not flow to leaf objects like Server objects in eDirectory, making its inclusion in the effective rights incorrect.

When JCorry is granted Browse, Create, Rename, and Inheritable rights as a trustee of the DA container, the Inheritable flag causes those rights to propagate to objects in subordinate containers like Corp. The Create object right is only meaningful on container objects because it grants the ability to create child objects within them - it does not apply to or inherit to leaf objects like Server objects, leaving Browse, Rename, and Inheritable as her effective rights on those servers.

Supervisor was never granted in the assignment, and Create does not carry over to leaf objects, so this combination overstates JCorry's effective rights.