Entity Based Access vs Confidentiality vs User Hierarchy

[Luby]

Hello GRC experts,

How do Entity-Based Access, Confidentiality Records, and User Hierarchy interact to determine a user's final visibility and edit permissions for Risk and Compliance data?