External Access to Zabbix Front End

[stevefxp]

Hello all,

I am trying to setup a user account, that can login to Zabbix from the public Internet. I am able to login and get the default web page, but its not showing me any information for many of the dashboards. Does anyone know what rights I need to give to this user account. The whole user/user role/user group thing is very confusing to me.

Thanks,
Steve

[moooola]

Hello Steve.
A dashboard can be made accessible to other users once it has been made public by the user who created it or with Admin role.


You can choose Private and then make it available only to specific users or user groups, or choose Public to make the template available to all users.


Hope this is the answer you are looking for.

[cyber]

Making it "public" will only show that dashboard in a dashboard list. Sharing is not helping anything, if user has no access to hosts, which are displayed on that dashboard. So first of all user has to be in appropriate user groups, which have access to data, that is displayed on dashboard...

[stevefxp]

Making it "public" will only show that dashboard in a dashboard list. Sharing is not helping anything, if user has no access to hosts, which are displayed on that dashboard. So first of all user has to be in appropriate user groups, which have access to data, that is displayed on dashboard...

Thats really my question...I have given the user account in question admin privileges, just so I could see it work, but I definitely want to understand what minimum rights need to be in place in order to see the dashboards and their info. The seond part of this is to understand if I can bypass the login screen with this dashboard. I just want to have a URL that my team can hit and see the dashboard.

[MRedbourne]

Zabbix documentation on user roles/permissions > 2 User roles (zabbix.com). If you're looking for a given user (or shared user) to view the hosts and problems section as a very broad example, check the box "Monitoring" for "Problems", "Hosts", "Latest Data", "Maps", "Discovery".

As for bypassing the login UI... No. Why would Zabbix purposefully bake in a method to bypass authentication [such as giving a dedicated URL]? That'd be an insanely shortsighted decision and almost certainly have been flagged by multiple Software Security or Pentesters. The best you could do is enable the Guest account (which has no password).

[cyber]

Thats really my question...I have given the user account in question admin privileges, just so I could see it work, but I definitely want to understand what minimum rights need to be in place in order to see the dashboards and their info. The seond part of this is to understand if I can bypass the login screen with this dashboard. I just want to have a URL that my team can hit and see the dashboard.

Admin or Super admin? admin is just a user with access to configuration menu.. All access restrictions still apply (has to be in proper usergroups, which have access to needed hostgroups). Superadmin is the only one, which has full access without any restrictions and need to be in some usergroups...

If you use somekind of SSO in front of Zabbix then your direct URL probably would work, but if its internal auth, then you need to log in each time you open it..