When we configure a space to have permissions per object, the permissions are given to each document at the time of creation.
If we change the definition of the permissions (adding a new group, modifying a permission), it will be necessary to launch an update process of these permissions.
This process is done with the command assign_bulk_series_permission_to_file_object.
The configuration can be made to run per machine or per space, for example:
assign_bulk_serie_permission_to_file_object --serie <serie_name> --all
assign_bulk_serie_permission_to_file_object --team <team_name> --all
You can see how to configure these commands in How to schedule automatic tasks?