Inheritance of permissions - not always understandable

What is a one sentence summary of your feature request?

The inheritance of permissions is not always understandable.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

The inheritance of permissions is not always understandable.
e.g.:
If you are working with “predefining rights” and you did not configure one of them as default, permissions will be inherited from the OU or it is set by another “predefining rights” up in the OU tree (if there will be found one with a default setting).
All this is working right, BUT a user is not able to see which permissions will be set in his new password! So there could be a really wrong result. Also there is a possibility to get (more or less) out of the permissions. So you can see, that permissions went “wrong”, but you cannot change it!
Unfortunately already happens at some of our customers…

How do you currently solve the challenges you have by not having this feature?

control it by hand and correct it!