Give User Permission to Host via Conntact Group

Hello everyone

I’m currently trying to set up an automation.
Here’s the situation: I have a user in a contact group whom I want to grant host editing rights for individual hosts. To do this, I’ve created a label that assigns the server to a specific contact group using the “Assignment of hosts to contact groups” rule. This works—I can see in the host overview who is listed as the contact and the group is displayed. The user also has permissions to edit their hosts, but unfortunately, when they select a host, they get the error: “You cannot edit the configuration for host ‘Server.intern.local’. Access is restricted, but no contact groups are assigned in the host’s permissions.” If I manually add the group to the host under Permissions, it works.

Can someone explain to me what the difference is?
Best regards,
Flavio

Only assigning a user to a contact group and then this group to a host does not create permissions to edit the host configuration. It is only good for interact with the host as you do with acknowledge problems or setting down times.
For the configuration part the real permissions on the host object are relevant.
Permissions can only be set directly on the host or the folder level. There are no rules to assign permissions for host editing.
Or you design a role for your needs. But roles are working on the whole system not only some hosts.