A security role setting that determines for a given object type at which levels within the organization hierarchy a user can act on that object type.