Rudder

The configuration object type is mentioned in the documentation, it is also the name of a role, which provides rule_write, directive_write, etc. for all configuration object (in the doc : It is a super-set of rule, group, directive, technique, parameter) , except that it is missing the group_write right, so there is no way to have group_write in Rudder without defining custom roles (or being an administrator).

EDIT : the configuration is only about directive, techniques, etc. see the meaning of "Configuration" in the Rudder menu.

What we need is a "groups" role that allows to edit groups, and their properties, as well as nodes'.