How do security groups limit access?

Each level has the access of all the groups below them, but does not have access to any security groups on the same level or above them. See Security for additional information.