Which type of permissions are granted to a user or group based on the permissions granted through group membership and any permissions inherited from the parent object?