While describing the slide graphics, notes state that:
On the slide, Group1 is assigned the administrator role at the Training datacenter and Group2 is assigned the Read-only role on the virtual machine object, Prod03-1. Both roles propagate to their child objects..Correct:
Actually the last sentence is wrong: the Read-only role assigned to Group2 on a virtual machine cannot be propagated to any child object as virtual machines have no child objects in the inventory tree. As such, the highlighted phrase above should be deleted or - even better - changed into "Permission granted to Group1 is propagated to child objects.