Any object may have both inherited permissions and explicitly defined permissions. Permissions gain strength the closer they are to the object; explicitly defined permissions override inherited permissions.
Permissions are defined for a single user, a group of users, or a role.