IRM Server uses a pessimistic privilege model. If a trustee is denied a privilege (it's revoked) at any point, the user will never have that privilege, even if it's specifically granted elsewhere. A revoke always supersedes a grant.

This section contains information about the following:

• Library-level Privilege Setting

• Group-level Privilege Setting

• Recommendations