Help with collection Security inheritence

I have a central site CEN, and the All Systems collection.
I have 3 Groups that have the following permissions:
Class:
G1 = No
G2 = Read, Advertise, Create
G3 = No
 
Instance:
G1 = read, read resource, view collected files and use remote tools.
G2 = read, modify, Delete, use Remote Tools, Advertise, Modify Resource, Delete Resource, view collected files, read resource, modify collection setting.
G3 = read, read resource, view collected files and use remote tools.
 
Below the CEN site I have 3 Child primaries, CP1, CP2, CP3
On CP1:
Class
p\G1 = Same as CEN
p\G2 = Same as CEN
p\G3 = Same as CEN
Instance
p\G1 = Same as CEN
p\G2 = Same as CEN
p\G3 = Same as CEN
 
On CP2:
Class
p\G1 = Full Permissions
p\G2 = Same as CEN
p\G3 = Same as CEN
Instance
p\G1 = Same as CEN
p\G2 = Same as CEN
p\G3 = Not Present
 
On CP3
Class
d\G1 = Same as CEN
d\G2 = Same as CEN
d\G3 = Same as CEN
Instance
d\G1 = Not Present
d\G2 = Not Present
d\G3 = Not Present
 
 
Now CP3 is "special" as it is in a seperate domain and forest (our development domain) but this doesn't cause issues for any of our deployments or anything else. p\ is production, d\ is development domains.
 
I can sort of understand the differences between CEN and CP3 but not CEN and CP2. Is there any way to get the permissions to be consistant across all 3 CPs?
 
Ryan

Remember primary sites in cm07 are all independent of each other for security rights.  If you want them to be in sync, then you have to set them up initially to be that way.
For collections, once you have it setup instance-rights; you can use the collection inheritance script linked from here:  http://www.mnscug.org/art...e-software-update-role
Note that CM12 has RBAC, Security Scopes and Roles, so it's all moot in the next version--and likely you won't have multiple primaries in CM12 anyway.

I was aware they were independent but I thought for collections defined on the central site (i.e. the collections that have the padlock beside them) the permissions where inherited as you cannot edit them at the lower levels.
 
But thanks for the answer it clears up some head scratching I was doing.