Mirror read-only view to zabbix-Dashboard to on-premise system

[siegmarb]

Hi folks,

we are happy zabbix users and monitor several independent customers with our central zabbix system. However, one customer asks now for read access to his "hosts/services". Basically this would be simply a user and appropriate permissions, but i do not like the idea of exposing our internal system and have a customer with read access. Especially that granting a wrong permission in our system could possibly lead to an unwanted privilege escalation.

I was thinking about another zabbix-server on-premise that talks also to the agents/clients, but that requires configuration in 2 places.

How do you guys solve this?

Thank you.

Stefan.

[NgRox]

Boa tarde, se você der acesso aos hosts e serviços, ele terá acesso informações de outros clientes? Se sim, cria um Zabbix separado e nos agents dos hosts desse determinado cliente, seta no parametro Server e ServerActive os endereços ip's ou dns de ambos os servidores Zabbix.

Me corrija se compreendi corretamente ou não!

Atenciosamente

[cyber]

Building separate instance is overkill. If it is ok for you to have at least a user for them (under your control) set up a grafana instance with zabbix plugin. User for integration will have limited access to only those hostgroups you configure ie, their data..