If HC creates a group in active directory "AllHostedDomainsCombinedDL" group with certain rights, what rights does this group have, and where are they applied?

Question: If HC creates a group in active directory "AllHostedDomainsCombinedDL" group with certain rights, what rights does this group have, and where are they applied?

Answer:
This group denies permission on "All Address List" container in Active Directory by following link (MS document).
Follow this link for further details:
 http://technet.microsoft.com/en-us/library/bb936719(EXCHG.80).aspx#CrSecGrpHst

Note: All Hosted Groups = Changed by HC with name "AllHostedDomainsCombinedDL" (Important: Basically it is AD security group not an Exchange distribution list)

Def: How to Create a Security Group for all Hosted Groups?

Use the following procedure to create an "All Hosted Groups" security group for all virtual organization security groups. This group will be added to the security permissions for the CN=Address Lists Container. With this configuration in place, users will only be able to view address lists that their security group allows them to access when they are using Outlook and when they click on the address list icon on the menu bar.