Ad Widget

Collapse

Zabbix user permissions

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • NilsA
    Senior Member
    • Sep 2020
    • 102

    #1

    Zabbix user permissions

    Hello there,

    I would like to give permissions to external admins to their own networks we monitor over our Zabbix server.
    My tests concluded that I can't grant them the Zabbix Admin role in their user configuration (to let them add items and triggers to their networks) without granting them access to all discovery rules.
    For some reason, despite only having access to one host group, they can see and change configured discovery rules of other networks. This is a big problem for data protection.

    Is there any way to circumvent this? If not, please add a method or fix this issue.
    A simple fix could be to add an entry for host group into the discovery rules.

    Cheers,

    Nils
  • Singularity
    Member
    • Aug 2020
    • 81

    #2
    I don't think if in the user-group if only one host-group is mentioned, they can modify in other host-group.
    If it is so, maybe to perform a test, add Deny to other host-groups and then check ?

    Comment

    • Hamardaban
      Senior Member
      Zabbix Certified SpecialistZabbix Certified Professional
      • May 2019
      • 2713

      #3
      Look at this feature in the new version https://www.zabbix.com/documentation...ion/user_roles

      Comment

      • NilsA
        Senior Member
        • Sep 2020
        • 102

        #4
        That looks great, thanks!

        Comment

        Working...