Ad Widget

Collapse

Zabbix server - Host permission level

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Pierre Vranken
    Junior Member
    • Aug 2024
    • 2

    #1

    Zabbix server - Host permission level

    Hello,
    In zabbix server, is it possible to configure items only on specific host with a specific user without host creation and import right access ?
    Same with template level ?
    -> User A -> Access R/W on host A and/or template A
    -> User B -> Access R/W on host B and/or template B

    Thank you in advance.
    Pierre
  • cyber
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • Dec 2006
    • 4806

    #2

    You cannot give access to specific host to a specific user, because permission system work on hostgroups vs usergroups matrix.

    Access to hosts


    Access to any host and template data in Zabbix is granted to user groups on the host/template group level only.

    That means that an individual user cannot be directly granted access to a host (or host group). It can only be granted access to a host by being part of a user group that is granted access to the host group that contains the host.

    Similarly, a user can only be granted access to a template by being part of a user group that is granted access to the template group that contains the template.
    If you give them admin rights (RW) you already give them access to Configuration part (Data collection in v7). You cannot take a way those "import" or "create host" buttons...

    Comment

    • Pierre Vranken
      Junior Member
      • Aug 2024
      • 2

      #3
      Yes I forgot to say I'm working with Host Group permission to give access to host.
      But If I understand, we need to have admin right (Data Collecion\Host right) and host groups permission to access Data Collection \ Host to access R/W on the specific host groups ?
      And if we have admin right we already have the right to use "create host" and "import"...

      Comment

      • cyber
        Senior Member
        Zabbix Certified SpecialistZabbix Certified Professional
        • Dec 2006
        • 4806

        #4
        Admin as such, gives you access to Data collection.. R and RW rights on hostgroups... well they do what they say, one is allowing viewing other also editing.. So if you give RW, then that user has all the editing options, including importing and host creation in that hostgroup.

        Comment

        Working...