Contents Library combaining users groups, one with download access one with can not download. what will be the result?

The download restriction alone does not represent the final resolved permission; because the conflict exists at the access level, the outcome is full denial rather than restricted download.

vSphere does not resolve conflicting group permissions by defaulting to the most permissive grant; the presence of a deny-equivalent restriction overrides the download grant.

In vSphere, when a user is a member of multiple groups where one group is granted a privilege and another group is explicitly denied that privilege on the same object, the restrictive permission takes precedence. For Content Library, a download restriction in one group assignment conflicts with the grant in another, and vSphere resolves this by denying access to the library entirely - not merely restricting the download action.

Generic read access is not preserved when group permissions conflict on the same Content Library object; the resolution results in no access rather than partial access.