User permissions - view ALL

[fito]

I'm on 1.6.5 and I need to create account for supervisor, but with VIEW rights only. He want to see full Zabbix configuration, all settings, Monitoring,Configuration, Administration....

It is possible or not ?

[bashman]

I suggest to make an account for super with "Zabbix user" privileges, then create a new user group, then add all your host groups with "read only" privileges and add your new user to that group.

[MrKen]

I suggest to make account for super with "Zabbix user" privileges, then create a new user group, then add all your host groups with "read only" privileges and add your new user to that group.

But, he wouldn't have access to the Administration tab, nor (maybe) ability to see full configeration of hosts/items.

So, alternatively, you could give him Zabbix Super Admin privileges; monitor changes to zabbix audit log, and receive alerts if and when he changes anything.
Otherwise, I would go with bashman's idea, and just tell the Supervisor 'that's all there is to see'.

MrKen

[bashman]

I would have two supervisor accounts, one as I said:

account for super with "Zabbix user" privileges, then create a new user group, then add all your host groups with "read only" privileges and add your new user to that group.

And another account for all "Super Zabbix admin" privileges to see and edit all settings, Monitoring,Configuration, Administration.

[fito]

...So, alternatively, you could give him Zabbix Super Admin privileges; monitor changes to zabbix audit log, and receive alerts if and when he changes anything.
Otherwise, I would go with bashman's idea, and just tell the Supervisor 'that's all there is to see'...
MrKen

Thank, but this is not good idea, because of security reasion.

bashman's idea is nice, but "Supervisor" wouldnt see administration tab..

Account for "supervisor" MUST be only as Viewer, with no possibility to change anything, but he want to see everything.

think, that it is not possible.

[bashman]

I think that's not possible.