I'm trying to create users with very restricted rights, mainly for communications between devices: I want a user that only has the right to set a specified vritual text input, but I'm a bit lost with how the groups and users link: which is more restrictive?
If a group does not have rights to do something, can the users belonging to that group have the rights to do it (can a user have more rights than the group it belongs to)? Or are the user-permissions only more restrictive than the group?
My idea was to make a group that has no rights, and the create members of that group that have the right only to what I want... but it does not work (when I try it in a browser; it works for admin, so it is a rights issue).
Thanks!
edit: I created a group that has only rights to the webinterface and app, added a user as a member of that group and gave that user only rights to the one virtual text input. The user can set the virtual text input, but I have not checked if it can do more.