The former table handles branch modification, while the latter table handles branch creation. All operations that are not explicitly done as a client connected to a server (such as locally using the CLI) will bypass branch permissions.
The former table handles branch modification, while the latter table handles branch creation. These permissions apply when a client connects to a Dolt server with a username and password (e.g. using a mysql client in your favourite programming language). These permissions will not interfere when operations are done as root/admin, (e.g when using Dolt from the dolt sql REPL from the command line).