The provisioning system also has non-configurable permissions assigned to users and user groups.
Members of the admin user group have all permissions on all objects in the provisioning system and can modify any object regardless of ownership.
See admin User Group.
Members of the admin user group are also the only users who can import plug-ins and create component types and system services.
Owners of processes have permission to stop the processes that they started. For example, if you start a comparison, you can stop the comparison.
Users cannot stop a process that they did not initiate unless they belong to the admin user group.
All registered users have read permissions on all objects.