Due to a number of limitations of ZCM as it fits in our environment we are considering not allowing agents to auto register at the time of installation. Build an adaptive agent installation package that will always fail to auto register at installation on a clean image is very easy to do. Writing a script that simply does a "zac reg....." is also quite easy.

My question is this, What are the minimum rights needed for a zone user to be able to just bring new devices into the zone and nothing else?