Inherited credentials
Type	ID	Role	Method
Subtree credentials
Type	ID	Role	Method
New subtree credential
Type	ID	Role	Method
user			deny grant
group			deny grant
IP Range			deny grant
world			deny grant