Capabilities Associated through Permissions
Document permissions pair a role with a capability to perform some action on a document. You can add multiple permissions to a document. If a user is part of a role (either directly or through inheriting the role) specified as part of a document permission, then the user has that capability for the given document. This section describes the capabilities you can assign to a role using permissions.