- Are conflicting permissions resolved by the most restricted one?

Frappe Framework Permissions
1

I have one user with 2 roles assigned. One role has Write permissions on Customer Group and the other only Read permission.

  • Which one prevails?
  • Should these 2 roles be separated into 2 users even though it’s only one person?

Thanks for your time