New Implementation Help - surely I am missing something?!

[SirMonitoralot]

Hi,
We are relatively new users of Zabbix but have hit a brick wall in terms of what the system appears to do - specifically around user groups and permissions.

I am hoping my Google-fu and documentation reading are letting me down in finding the answers and not Zabbix itself hence this post for some advice!

Our situation is .... we have a number of different departments/areas with their own servers. No area should be able to see another areas servers or screens/dashboards etc. We have created servers in host groups for each area and created user accounts with access to this host group - all good so far!

However, I cannot seem to do the following;

1) Change the menus for a user. I do not want users to see all the menu options as there are lots of options which are pointless for them - how can I do this

2) When a user selects the Graphs option - their Group is selected and Hosts is All. Here is the problem, in the graph drop down they see 'x' times the number of servers as graph options i.e. 37 CPU Load, 37 Memory Usage etc - why is this not 1 CPU Load as 'All' is selected? The 'All' option seems to be ignored - is this right, a bug or something we have done wrong?

3) Screens - there does not seem to be any permissions associated with a screen so all users see all screen names in the dropdown - again is this right as some areas / projects with screens (with the screen name as the project so it can be identified) are sensitive and private and should not be seen by everyone

Some help/pointers/advice would be good as I really do not want to go back to the drawing board for another monitoring tool

Thanks

SirMonitorAlot

[BDiE8VNy]

1) To what "menus" / "menu options" are you referring to? However, the only configurable assets regarding menus are Global scripts.
2) When "All" is selected, then each Custom graph from all hosts are listed. See ZBX-7287
3) A user sees any screen where no object is used that he or she has no proper permission to.

[SirMonitoralot]

Thanks for the response, and apologises if I was not very clear in my initial post.

1) By 'menus' I mean the 'Monitoring', 'Inventory', 'Reports' menus and each menus sub-menus -- can these be configured/removed/changed per user?

2) OK, I see this is a bug then. It would be good to have this resolved (major bug since November14) and an option to display one of the variables from all servers i.e. I select 'All' then select 'CPU Load' and I see a graph of all the CPU loads for all the servers

3) Yes, I understand that if the user clicks the 'screen' link and they cannot see the actual server/host/data then they will see nothing at all, this is right, but why should they even see the 'screen' in the dropdown in the first place - having permissions per screen/slideshow etc would be a better option in my opinion.

Thanks!
SirMonitoralot

[BDiE8VNy]

1) The major frontend sections can only be affected in a pre-defined way depending on User type.

2) Well, the Group/Host combo-boxes in the frontend are generally used for filtering. A selected 'group' limits selectable 'hosts'. A selected 'host' limits selectable 'graphs'.
Anyway, I see your point. But having 'All' to show all graphs of a host or even all graphs of all host might become a serious problem on larger setups.
You might possibly be interested in the 'Dropdown first entry' option.

3) The permission model boils always down to host group permission for simplicity/performance reasons. Anyhow, I agree that it might become problematic when a Screen might have objects that are not host related - thus accessible by everyone.
Maybe take a look at ZBXNEXT-77.