If you try to set a sample permission combination on the checkboxes, the powerful Access Control Aitesleri close is shown where you can configure the regarding ACE in detail. On note that the propagation could be blocked somewhere in the subtree of an object. Just deactivate the Inherit permissions from parent objects option..
Please note that you can easily change the scope value according to the current scope aap. Just click on the scope label directly in the regarding row and choose the new scope from the pulldown list: Please be aware of the fact that there are combinations of checkboxes which are NOT possible or not allowed to set in one single ACL line. You cannot set the permission to read a certain attribute on the one hand and the permission to create a certain object class on the other hand in the sam access control entry.