In Panorama, you can nest device groups in a tree hierarchy
of up to four levels. At the bottom level, a device group can have
parent, grandparent, and great-grandparent device groups at successively
higher levels—collectively called
ancestors—from which
the bottom-level device group inherits policies and objects. At
the top level, a device group can have child, grandchild, and great-grandchild
device groups—collectively called
descendants. You
can override an object in a descendant so that its values differ
from those in an ancestor. This override capability is enabled by
default. However, you cannot override shared or default (preconfigured)
objects. The web interface displays the

icon to indicate
an object has inherited values and displays the

icon to indicate
an inherited object has overridden values.