We have user groups with RW permissions to host group A, zabbix admin privileges and RO permissions to group B. Group B only includes predefined templates
When trying to clone a host in A which uses templates in group A and B, users get a permission denied error. Using templates in RO groups should allow the user to add them to a host.