After associating the desired set of resources with the Principal, you may assign default permissions to the entire set. This means each resource inherits the same permissions.
This is convenient because the administrator does not have to assign the same permission set to all the individual resources that have been associated to the Principal. Note that default permissions are not supported for the devices. The Global Device Security policy section details this information.
