once you give someone the Collection Modify permission, the user linked to the custom role will also get the option 'add selected item to existing device collection'
BUT: this is not what the customer wants!
they are afraid that users from that role will then just simply select all machines ...
so instead they wanted to use the 'add resources' option on a collection (I know this will also give you the option of selecting all machines, but hey...)
so I would like to have the RBA viewer or another tool/option that will show me the impact of toggling one specific permission setting ??
I think we are going to build a powershell UI frontend for those specific custom permission subsets