User permissions

I’m setting up a new user group in Genie and I’m wondering about the Filter and Validate options. What do these do?

I am also confused with permissions. I’ve created permission: resource-devices;access-read. I want to show only device list and information. Now I can enter device, change values, add/delete tag, reboot, reset, push file, delete. Can I filter these options? It could be enough only show device list, just limit entering device.

can someone explain what is the proper way to enter the filter and validate under Admin - Permissions menu ?
example i wanna to give write permission for devices to my staff but i want to restrict them to click reset button.

thank you