What causes some permissions to appear greyed out in a security role?

The reason some permissions may appear greyed out in a security role is that the particular role is a parent of a child role that contains the same permissions. In Cornerstone OnDemand, when a security role has child roles associated with it, certain permissions are inherited from these child roles. This inheritance mechanism ensures consistency and prevents conflicting permissions across the hierarchical structure of roles. Consequently, if a permission is already defined within a child role, it will be reflected in the parent role as greyed out, indicating that it is not available for modification at that level due to its existing configuration within the child role.

This design helps in managing complex role hierarchies by allowing administrators to set permissions at different levels without redundancy, thus simplifying the overall permissions management for users within the organization.