Permission issues in the dashboard – Host Navigator & Host Item

[danielitm]

Hello everyone,

I've recently encountered a problem with permissions in the Zabbix dashboard and wanted to ask if anyone has had similar experiences or knows a solution.

Setup:
- Zabbix version: 7.4.0
- Dashboard with the following widgets:
- Host Navigator
- Widgets with Host Items where a host from the Host Navigator is adopted via "Override host"

Problem:
A user is authorized for a specific host group and correctly sees the hosts they have access to in the Host Navigator. However, as soon as a widget on the dashboard uses a **Host Item** that doesn't belong to a host the user is directly authorized for, the widget remains empty—**even if the host was selected via the Host Navigator**.

Observation:
Permissions appear to come **exclusively** from the Host Item configured in the widget. The Host Navigator is **not considered**, which significantly limits dashboard flexibility for restricted users.

Goal:
I wanted to build a dashboard for multiple users/groups where they only see the servers they're authorized to access.

[danielitm]

Zabbix version: 7.4.1 still has the same problem

[kz3]

First I would create the users (User1, User2, User3),
each one allowed to see only one host group. Then I would create a user role for dashboards, with access only to Dashboards and Problems but keeping access to all widgets.
After that, I would create user groups and assign the corresponding host group permissions (for example, a group called VMware containing User1, with only the host groups User1 is allowed to see).
I would repeat the same for the other users.
Finally, I would create a dashboard with widgets including all host groups.
When any user logs in, they will only see the data belonging to their allowed host groups.

[danielitm]

Thanks for your suggestion @kz3
That's what I did too, but the widgets don't work if I set it up that way:

The problem is that users who are not authorized on the MySQL server cannot see data in the widget even if they select other servers.
Users who are authorized on the MySQL server can see their data as well as that of other hosts.

[kz3]

Hey sorry to hear that . The idea i think it should work i think the problem maybe is on the permissions of the group
by example in an imaginary group called (acces to vms) on the group permissions the host group containing the vms it should appear and allowed on read

Because iwhen i tried a couple months ago i didn´t had any problem whit mysql just on permissions and user roles ... etc

at this moment my zabbix server on maintenance but tomorrow maibe i can try it by myself and come back whit the results.

[danielitm]

Yes, it is a permissions problem, but I would say it's one with the widget, because it doesn't pass the request on cleanly. It only checks if you have permissions for "MSSQL Server" in the example, and not for the server you selected via the host selection.

[kz3]

it is possible i just tried

this is from the guest user


and this is from my user

[kz3]

Two diferent host groups

[kz3]

So when the users groups were created y just give acces to the guests users to a group of hosts


while me or other user in their user group just has access to the data from other host group

[danielitm]

If I understand correctly, you're working with fixed hosts there, not with the host navigator.

[kz3]

I just translated it to english

in this case i can add two diferents data sets



But to put both on a single one you can too


Each host is is one host group , each user are on a diferent user group and on their user group each one only just have acces to one of the hosts groups so if user1 comes to see the dashboard is only gonna see one host data and the same for user2 ---- Thas the resume of all the post so people understand too

[danielitm]

Then I could also build a dashboard for each group, but that would be dozens and I wanted to avoid that.