The three types of domain object permissions are permissions by group or user, permissions by operating system profile, and permissions by domain object. Group or user permissions allow administrators to view, edit, and assign permissions for a specific group or user. The administrator can assign, edit, and view permissions for OS profiles in the administration tool. Permissions by domain object allow the admin to assign, edit, and view permissions for multiple groups or users on the domain object.