When configuring privileges you have the option of changing the default from non-hierarchical to hierarchical. You may also need to assign privileges to a specific area or multiple areas and as such need to have an understanding of how certain combinations of privileges and areas will affect the security of your project.