To edit the list of filters, you must have Supervisor or Access Control rights to the ACL property of the object. You can set filters that block inherited rights to the object as a whole, to all the properties of the object, and to individual properties.
These filters won't block rights that are explicitly granted to a trustee on this object, because such rights are not inherited.
To add a property to the list:
IMPORTANT: If you delegate administration to a User object and that object is subsequently deleted, there are no objects with rights to manage that branch.
To delete a property from the list:
For information about NetIQ trademarks, see http://www.netiq.com/company/legal/.