How to setup ACL permissions ZFS vs Samba

[Sawtaytoes]

If I want to setup permissions for Samba on an ACL'd ZFS in TrueNAS SCALE, which should I do:

1. Samba controls permissions, ZFS is the standard root:root.
2. ZFS controls its own ACL with Samba having the standard "Everyone" permissions.
3. Permissions should be in both Samba and ZFS.

No one else logs into my TrueNAS server. Just me. And I restrict TrueNAS SCALE Applications only to specific datasets.