The permissions a user has on an individual resource are the permissions the user has on any collection containing that resource. For example, if a user has Use Remote Tools permission on collection A, the user can use Remote Tools on all resources in collection A.
Furthermore, the permissions a user has on a resource are valid in any collection containing that resource, regardless of the user's permissions on the other collections containing that resource. For example, if a user has Use Remote Tools permission on the Windows 95 collection, then that user can start Remote Tools on a Windows 95 client in any collection; the user does not have to start the Remote Tools from the Windows 95 collection.
Note When you create a security right for the Collections security object class, SMS enables Read permission by default.
About Permissions and Security Objects
About Advertisement Security
Security Rights Overview
Security Configuration Overview