Hi belgianbiscuit ,
If you create a role with Dfm.Core.AccessCheck capability on Global group and then add that role to any user then that user has capability to dfm core access check on all objects under the Global group (all groups, storage system and datasets etc).
But if you create a role Dfm.Core.AccessCheck capability on particular dataset or storage system then add the created role to user then that user has capability to dfm core access check, only on dataset or storage system and objects under the dataset or storage system.
In other word you can say:
If you create a role with “xyz” capability on “ABC” resource and then add that role to some particular user “user1” that mean “user1” can do “xyz” action on “ABC” resource or child member under the “ABC” resource.
<DFM.Core.AccessCheck capability in the global scope in DataFabric Manager server">
Above sentence mean you need to select “Global” as resource while creating role.
Regards,
Gireesh