Visual Atlas Use diagrams, maps, and comparisons when the concept is still fuzzy in plain text.

Users, Groups, and Permissions Matrix

See identity, ownership, permission bits, and elevation as a permission system instead of a pile of commands.

Matrix

Users, Groups, and Permissions Matrix

People often memorize chmod or GUI clicks without understanding who is being granted what and why access fails.

Open Users, Groups, and Permissions Open lesson Open lab
Diagram
Layer IdentityWhat it controlsCommon tool or view
User A specific accountwhoami / account properties
Group Shared access roleid / local groups / group policy views
Owner Who controls the objectls -l / file properties security tab
Permission bits or ACL Allowed actionschmod / icacls / GUI security settings
Elevation Temporary higher authoritysudo / UAC prompt
What to notice
  • Identity, ownership, and permission bits are different layers of control.
  • Read, write, and execute mean different things for files and directories.
  • Elevation changes authority temporarily; it does not rewrite the underlying model.
Common confusion
  • Thinking sudo or Run as Administrator permanently fixes ownership problems.
  • Thinking group access behaves the same as user ownership.
  • Thinking execute always means run this file as a program.
Related learning
Users, Groups, and Permissions 5 command anchors
Topic hub Library
Best related lessons
M12 - Who Owns What: Users and Groups

Understand how users, groups, and administrator-level accounts divide access so one machine can be used safely by different people and processes.

Field-verified M14 - Users and Groups: CLI

Inspect identities, groups, and local accounts from the command line, starting with safe read-first commands before making account changes.

 M15 - Permissions: NTFS and Linux rwx

Understand the basic permission models in Linux and Windows, and make small, safe permission changes without treating access control like magic.

Field-verified M16 - Elevation: UAC and sudo

Understand temporary privilege elevation in Windows and Linux so you can perform administrative work deliberately instead of staying permanently over-privileged.
Best related labs
LAB-USER-02 - Creating and Modifying Users

Master the command-line tools for spawning new users, defining their environment, and modifying their attributes.

 LAB-PERM-01 - The Permission Trinity (rwx)

Read Linux permission strings confidently and explain what read, write, and execute mean for files versus directories.

Field-verified LAB-PERM-03 - Numeric Permissions (Octal)

Translate basic rwx patterns into numeric modes such as 644, 755, and 600 so common Linux permission states become recognizable and usable.