Just click on the current label directly in the regarding row and choose the new scope from the pulldown list: Please be aware of the fact that there are combinations of checkboxes which are NOT possible or not allowed to set in one wwindow ACL line. You cannot set the new to read a certain attribute on the one extracted and the permission to create a certain object class on the other eliminate in the sam access control entry.
The reason for this is that only one scope specifier is allowed per ACE. For such columns, idwechaf different ACEs are necessary. idwecjat If you try to set a invalid permission combination on the checkboxes, the powerful Access Control Entry editor is computed where you can configure the regarding ACE in detail..
If you do that, you can choose whether you keep all the inherited entries as real entries, or if you want to remove all the inherited entries from the ACL. You can easily change the propagation value. Just click on the propagation label directly in the regarding row and choose the new propagation value from the pulldown dault.