...
NOTE: Do not pick any items that are inherited from the Parent Object.
NOTE: Never add users to 'Full control' access. If there is a ticket, TC, or DCL that is requesting 'Full control' levels of access for a user, it needs to be escalated to CSDS_SUPPORT.
The Specialist will then look for the group in Active Directory and add user to the selected group.
...