Group permissions for template groups

[linuxmaya]

Hi all,

in zabbix 7.0.24 I created a new user group (lets call it "customer") and added template permissions to this user group: 1 template group with read-only and 1 template group with deny permission.
Both groups in this example contain only one specific template. Both templates (from both groups) are assigned to a specific host (let's call it "Client").

But when I log in with the user that has this group "customer" assigned, it still can see "Latest data" for the "Client" host with all it's monitoring items, so the one that I set to "deny" but items from other templates that are not even explicitly allowed or denied in the user group.
How does this come, am I misunderstanding the user group => template group thing? I expected the "customer" user to see only my defined "read-only" template's items in host's latest data.

BR, Maya

[kyus]

Template permissions are used to define the level of access that users have to the template data.

Just like that, host permissions are used to the define the level of access to all host data. So if your user has at least read permission to the "Client" host, he'll be able to see all data from this specific host (even if he can't see all the templates linked to the host).

Quoting the documentation:

If a user group has Read-write permissions to a host and Deny or no permissions to a template linked to this host, the users of such group will not be able to edit templated items on the host, and template name will be displayed as Inaccessible template.

If you want more details, you can check this.