What governs what a user can do in the Cornerstone CSX system?

The correct answer is that permissions govern what a user can do in the Cornerstone CSX system. Permissions define the specific actions that users are allowed to perform within the system, such as creating, viewing, editing, or deleting records. They are crucial for maintaining security and ensuring that users can only access the functionalities relevant to their roles and responsibilities.

While roles are connected to permissions, they represent a collection of permissions assigned to a user based on their job function. Access levels pertain to the extent of access granted to different sections of the system but do not detail specific actions. Constraints can refer to limitations within the system but are not the primary governing factor for user abilities. Overall, permissions are the most direct way to manage and control user activities in the system.