A permission model contains all permissions that apply to an individual item (see Coveo Cloud V2 Management of Security Identities and Item Permissions). It can contain allowed and denied permissions, as well as multiple permission sets and permission levels in order to faithfully replicate a complex secured enterprise system.