| User and Group access right are "OR": 1. If a user with no access right on any port, while the user is in a group and the group is given access right on port 1: the user can access port 1. 2. If a user with access right on port 1, while the user is in a group and the group is not given any access right on any port: the user can access port 1. |