Permissions from the secondary iSheet are
not
applied when they are synced with the primary iSheet. By default, users with access to the primary iSheet can see
all
synced records. However, an admin can restrict access to the synced columns in the permissions for the primary iSheet, exactly as if the columns were contained in the primary iSheet.