Permissions can be set on two levels : Global permissions that are associated with a role.Permissions over specific resources -Permission target.