I am looking to add some groups to a subsite and wonder how the SharePoint permissions are cascaded for nested groups?
e.g. Is it least priveledge?
All_Users
|__Managers
|__Request_Managers
|__Order_Managers
|__Processing_Managers
|__Users
|__Request_Users
|__Order_Users
|__Processing_Users
i.e. If I add someone to Processing_Users then they should also get permissions to anywhere "Users" has permissions and also to "All_Users" (e.g. the site in general)
Finally, I'd like each group to have a 1:1 relationship to an AD group. Therefore add a user to the correct AD group and they automatically have permissions to the Site and all the areas relevant to the group.
Is that possible/feasible?