If a single namespace is being used to store data from multiple customers or sites, there needs to be a way to propagate security inheritance down to objects (streams, assets, etc.) within the namespace.