Thank you for the response. I am in fact using the Authorization server for my testing. I have also found what may be a bug, let me describe further.
1. I can not use your Example 1 above, though our example used two users and two computers, in fact it would we two users (or more) and ten computers or more. To change each host and remove/change one user from each host is a major pain in the butt as you know... :-)
2. I actually have 4 computers (Comp 1...4) I am testing with Comp 4 also running all the Server applications (RUS, Address Book Sync) as well as RU Host. I have observed the following which I think could be bugs?
-When on Comp 1 and User 1 has full rights on only Comp 2, User 1 can not see any address book entries nor Comp 2. So this prevents (for me anyway) any access including View to the address book. Yet, if I add the User 1 to the "Parent" Address book with No Rights, and No rights to any child Comp's (Shows User 1 Inherited yet no check marks for any rights), User 1 can now see the address book and even control Comp1-4. Again, User 1 has No Rights yet now has full control. This seems broken to me?
It appears to me that the (synced) Address book itself should be a Right which can be controlled independently of the Comps or a new Right for each Comp and should be "Display in Address Book" (per user or group) so that what is seen in the AB by each User/Group is controlled. This aside there does appear to be a flaw in the Rights controlling given that access is now granted without any Rights.
You are welcome to private message me and I would gladly give you full rights to my RU setup in order to better see what I am seeing?
Let me know how I can help further.
Edited:Ross - Feb 26, 2017 7:39:38 pm EST