If a user has multiple settings for session quotas at different levels, Access Manager follows this precedence to determine the actual quota for the user:
role/organization/realm (based on the conflict resolution levels)
For example, Ken is a member of both the marketing and management roles. Session quotas are defined as follows (all have the same conflict resolution level):
organization - 1
marketing role - 2
management role - 4
user Ken - 3
Ken's quota is 3.
For more information about the session quota constraints attributes, see the Access Manager Console online help.