How do User Group permissions relate to Device Groups?

[cbrand-ludlums]

Describe your issue How do User Group permissions relate to Device Groups? From what I can tell, they can see the device group and the devices in them, but not while trying to add a device to a user. In that case, they can only see device groups they've created or had their user added to.

Screenshots

Server Software (please complete the following information):

• OS: Ubuntu
• Virtualization: ESXI
• Network: [e.g. LAN/WAN, reverse proxy, cloudflare, ssl offload, etc...]
• Version: 1.0.70

In the above screenshot, I have a Device group called Testing created by me, who is admin on the server and I've given a user group "IT" full access to it. They have full access to the group and devices in it. I have a user "pbrand" in the "IT" user group.

If any user in the IT user groups creates a new user and wants to give them access to a single device in the testing device group, when they go to add a device to that user, they can only see the device groups they have created, not any of the device groups granted to the IT user group. If I manually add the user pbrand from the IT user group to the device group user authorizations, then they can see the device groups when adding device to a user.

Once this is done, they can add the user to the group. Without adding the user explicitly to the device group, the testing group doesn't show up for them to add a device.

Shouldn't just being a member in the IT group grant them permission to see the dropdown list of all the device groups the IT user group is a member of in the add device dialog?

[Ylianst]

Oh! I think this is a bug. If you are granted full rights over a device thru a user group, you should be able to give the rights to other users. I need to look into this.

[cbrand-ludlums]

thanks for looking into this Ylian, BTW, I'm liking Meshcentral very much!