What a management user is permitted to do is determined by the roles to which the user is assigned. A system of includes and excludes based on the user membership determines to which role a user belongs.
在以下条件下,用户被认为已分配至某个角色:
排除项优先于包含项。