Hi everybody,
Production instances of Zabbix currently "Zabbix 4.0.14".
What I need to be able to do:
I need a category of users that can access host configuration, including items and triggers, but without being able to make any modifications.
My comprehension, which seems to be flawed is that by configuring users with 'Zabbix Admin' user type and giving 'Read' access to hosts groups to the user's User Group would be enough to achieve that.
What I'm instead seeing (from users reports and my own testing) is that if user groups only have read permissions to host groups, in the configuration->Host menu, they'll see nothing (no hosts). If they search for the host in the top search bar, they will find it, but will only see the numbers of items and triggers, there will be no hyperlink to go to them.
If I change the user group permissions to read/write, then they can see everything, but of course they can also modify them, which is not wanted in our environment.
The following chart seems to indicate that it's supposed to be possible, but that's not my experience. So I'm guessing I might either be wrong that's it's actually possible, or I'm not configuring users and users groups correctly (or something else.
+============+=============+==============+======= ==============+
| | Zabbix User | Zabbix Admin | Zabbix Super Admin |
+============+=============+==============+======= ==============+
| Read-Write | Read | Full | Full |
+------------+-------------+--------------+---------------------+
| Read | Read | Read | Full |
+------------+-------------+--------------+---------------------+
| Deny | None | None | Full |
+------------+-------------+--------------+---------------------+
Read - Read-only permissions
Full - Read-write permissions
None - well, no permissions
If anybody can provide any guidance, I'd appreciate it.
Thanks!
Production instances of Zabbix currently "Zabbix 4.0.14".
What I need to be able to do:
I need a category of users that can access host configuration, including items and triggers, but without being able to make any modifications.
My comprehension, which seems to be flawed is that by configuring users with 'Zabbix Admin' user type and giving 'Read' access to hosts groups to the user's User Group would be enough to achieve that.
What I'm instead seeing (from users reports and my own testing) is that if user groups only have read permissions to host groups, in the configuration->Host menu, they'll see nothing (no hosts). If they search for the host in the top search bar, they will find it, but will only see the numbers of items and triggers, there will be no hyperlink to go to them.
If I change the user group permissions to read/write, then they can see everything, but of course they can also modify them, which is not wanted in our environment.
The following chart seems to indicate that it's supposed to be possible, but that's not my experience. So I'm guessing I might either be wrong that's it's actually possible, or I'm not configuring users and users groups correctly (or something else.
+============+=============+==============+======= ==============+
| | Zabbix User | Zabbix Admin | Zabbix Super Admin |
+============+=============+==============+======= ==============+
| Read-Write | Read | Full | Full |
+------------+-------------+--------------+---------------------+
| Read | Read | Read | Full |
+------------+-------------+--------------+---------------------+
| Deny | None | None | Full |
+------------+-------------+--------------+---------------------+
Read - Read-only permissions
Full - Read-write permissions
None - well, no permissions
If anybody can provide any guidance, I'd appreciate it.
Thanks!