We take for example a user with no global roles. He has only the role "inventory role - inventory * - Read" on one group with at least one device. cockpit - right slider: The user is able to see "add smart phone", even though he is not allowed to ...
