...
If for a certain permission we find a capability and a capability set with exactly the same type/resource/action values, using both capability and only capability set is still requiredenough. For example, in a case shown below, both found entities should be assigned it is enough to only assign capability set to a role/user.
...