Hello,
my home automation runs in an unprivileged LXC container. Client devices are controlled via a Zigbee USB stick.
I have a udev rule with:
"SUBSYSTEMS=="usb", ATTRS{idVendor}=="1cf1", ATTRS{idProduct}=="0030", MODE="0666", GROUP="dialout", SYMLINK+="CONBEE"
and in the config...