...
When creating a record, the user must have Write permission that applies to the Business Service that the record is becoming a member of; otherwise, the operation will be prohibited. If no Business Service is provided during the creation then the default is “Generic” and th use the user must have Write permission for this one.
Read
When reading/viewing a record (for example, a list or record Details), the user needs only Read permission for one of the Business Services that the record is a member of.
...
When updating a record, the user must have write Write permission for both the original record and the updated record.
...