{"action":"opened","issue":{"url":"https://api.github.com/repos/cloudfoundry/uaa/issues/184","labels_url":"https://api.github.com/repos/cloudfoundry/uaa/issues/184/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/uaa/issues/184/comments","events_url":"https://api.github.com/repos/cloudfoundry/uaa/issues/184/events","html_url":"https://github.com/cloudfoundry/uaa/issues/184","id":92469938,"number":184,"title":"Zone users can't see the groups they create","user":{"login":"amiri-ge","id":11050633,"avatar_url":"https://avatars.githubusercontent.com/u/11050633?v=3","gravatar_id":"","url":"https://api.github.com/users/amiri-ge","html_url":"https://github.com/amiri-ge","followers_url":"https://api.github.com/users/amiri-ge/followers","following_url":"https://api.github.com/users/amiri-ge/following{/other_user}","gists_url":"https://api.github.com/users/amiri-ge/gists{/gist_id}","starred_url":"https://api.github.com/users/amiri-ge/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/amiri-ge/subscriptions","organizations_url":"https://api.github.com/users/amiri-ge/orgs","repos_url":"https://api.github.com/users/amiri-ge/repos","events_url":"https://api.github.com/users/amiri-ge/events{/privacy}","received_events_url":"https://api.github.com/users/amiri-ge/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-01T19:46:13Z","updated_at":"2015-07-01T19:46:13Z","closed_at":null,"body":"It seems that if a zone user with sufficient privileges creates a group, they are then not able to see that group and therefore not able to add users to that group. The only way to correct this problem is to log in as a admin user for the default zone and give the user read/write privileges to the group they just created. This seems odd. We are creating the group like so:\r\n\r\nuaac target http://testzone1.locahost:8080/uaa\r\nuaac token owner get client user\r\nuaac group add my_group\r\n\r\nIs UAAC missing some step in the group creation? Otherwise, can we modify the behavior of group creation so that the creator of a group is automatically added to the list of users that can read/write a group/membership? That's the behavior we would expect."}}