Which is true about implementing access permissions in Planning?

Users and groups are restricted from accessing applications by removing custom applications and plan-type security.

Planning roles can be assigned to members in all dimensions in all modules in the application.

If a user with group access has individual access permissions that conflict with those of a group to which the user belongs, then group access permissions take precedence.

A member with Read access that has a parent with Write access to all its descendants results in an access level of Read for that member.