Some background first:
I have several different companies who access my Zabbix system. Each company has its own User Group and Host Group. Currently, if I want to have a user at one company to be able to create hosts, I give them 'Zabbix Admin' access, and add them only to a group for their department. This way, they can only see their departments hosts, and they have full control over them.
But the system is problematic in the area of Actions.
If I configure one of the conditions of an action to be Host Group = {Company A}, people at {Company B} cannot see the action. However, I also need a 'catchall' notification which receives notices regardless of Host Group. Without the Host Group condition, all of the users can see and edit my notification action - which means that anyone who wants to can mess with it.
I don't believe it's currently possible to setup an action which will affect all host groups without being visible to all users - but this ability is important!
I have several different companies who access my Zabbix system. Each company has its own User Group and Host Group. Currently, if I want to have a user at one company to be able to create hosts, I give them 'Zabbix Admin' access, and add them only to a group for their department. This way, they can only see their departments hosts, and they have full control over them.
But the system is problematic in the area of Actions.
If I configure one of the conditions of an action to be Host Group = {Company A}, people at {Company B} cannot see the action. However, I also need a 'catchall' notification which receives notices regardless of Host Group. Without the Host Group condition, all of the users can see and edit my notification action - which means that anyone who wants to can mess with it.
I don't believe it's currently possible to setup an action which will affect all host groups without being visible to all users - but this ability is important!
Comment