Objects that are policy or ad hoc controlled are subject to access control. The permissions that can be set on these objects are described in Setting Permissions. For example, to create an object of a specific type in a domain, a user must have Create permission for the object in that domain. To change the ad hoc permissions of others using the Access table, a user must have Change Permissions and the permissions to be changed.