Ad Widget

Collapse

Help with a user role and how it interacts with alert triggers

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • surfrock66
    Member
    • Jul 2018
    • 30

    #1

    Help with a user role and how it interacts with alert triggers

    My zabbix 6.4.11 environment is working well, but I'm having trouble getting alert emails to trigger. We are using SAML authentication however our admin accounts do NOT have emails associated with them, and since you can't modify media types for provisioned users, I cannot just change email addresses. To get around this, we have AD mailing lists. I created an "IT.Alerts" user in zabbix and assigned the email address of the distribution list AND made a custom media type with our domain SNMP information, a test email works perfectly and is received by everyone in the list.

    To support this, I tried to make an extremely limited role for this user called "Alert role". It's a derivative of the "Admin" user type. I gave it all the alert permissions, access to problems modules, and nothing else. I then added the IT.Alerts user to this group.

    I have an existing trigger which I can fire at will, and this shows up as an "Average" in my problems dashboard (stop the zabbix agent on a test server).

    Then I created my action. My conditions might be a bit complicated, but I have tried to simplify it for testing and it's still not working:
    Click image for larger version

Name:	image.png
Views:	416
Size:	38.9 KB
ID:	480440
    The operation is to send an email to the IT.Alerts user I created, which is here:
    Click image for larger version

Name:	image.png
Views:	240
Size:	25.2 KB
ID:	480441

    So, I go and trigger the alert condition. The alert shows up as the correct severity on the problem dashboard, but no action fires, and the Action Log under reports shows no activity.

    My theory is the role is too locked down; what are the minimum permissions I would need to have a role with no access other than to receive email alerts?
  • cyber
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • Dec 2006
    • 4807

    #2
    Role does not give permissions to data. Add enough permissions (include that user in required usergroups, which have permissions to right hostgroups) to your user and you will receive your alerts...
    If you log in to Zabbix with your it.alerts user, you shoudl see all the problems there in GUI, if not, you probably do not have enough permissions and alerts also do not work for you.

    Comment

    • surfrock66
      Member
      • Jul 2018
      • 30

      #3
      That was a great idea, I tuned it and the following gets me emails for alerts, thanks!

      Click image for larger version

Name:	image.png
Views:	226
Size:	37.3 KB
ID:	480524

      Comment

      Working...