User permissions

I’m setting up a new user group in Genie and I’m wondering about the Filter and Validate options. What do these do?

I am also confused with permissions. I’ve created permission: resource-devices;access-read. I want to show only device list and information. Now I can enter device, change values, add/delete tag, reboot, reset, push file, delete. Can I filter these options? It could be enough only show device list, just limit entering device.