Group's hierarchy is great to simplify permission management, but the actual permissions are maintened at detail level.