zabbix admin permission question.

[yerrysherry]

Hey,

Last week I installed zabbix 2.0.1 and I created a user (serege) with "zabbix admin" rights.

This user I put it into a user group (our users). In this user group, I added a host group (linux servers) with only read permission.

Now, when I log in with this user and go to the Configuration tab, I don't see any data when clicking on the Host groups or Hosts tab. I expected that this user could only read the info. So, what can this user to with those permissions? (is it a bug?, hmmm can't be)

When changing to Read-Write, he can see all configurations of this host group. He cab read and change hosts, items, ...

Regards,
Gerrit

[richlv]

but do you have hosts in that group that are successfully collecting data ?

[yerrysherry]

yes, when I changed the permissions from read-only to read-write, the user sees the host groups, the hosts and all the items.

I'm using postgresql

[benjaminconnelly]

Sounds like the can see monitoring info from that host group just not configurations. Sound correct?

[yerrysherry]

Ok, now I understand it. When a user is "zabbix admin" and you give the user group only read permission then that group can monitor those host group.

How the hosts, items, triggers are configured in the configuration tab you can't see it. Then you must give read-write permission.

[yerrysherry]

On not, because I changed the user from "zabbix admin" to "zabbix user" and that user can now also monitor.

If you give a user "zabbix admin" permission and put him in a user group and give then only read rights to host groups what can this user group then see, watch?

I taught that that group can see how the host, items, triggers are defined in the configuration tab, of ot?

[richlv]

"zabbix user" type users may only use first three tabs in the interface, zabbix admins also see "configuration" and superadmins see "administration"

[sirving]

"zabbix user" type users may only use first three tabs in the interface, zabbix admins also see "configuration" and superadmins see "administration"

I also have the same issue and as with the OP I don't know if this is a bug or not. If a user has zabbix admin rights and read access to information, the configuration screen is blank, which in my eyes is the same as a zabbix user account.

Information is put into the configuration screen only when the group is given write access to the object therefore logically this appears to be a bug as it doesn't give the ability to give a junior administrator the ability to read configurations to learn how it is working. In our case we have a separate maintained system in development where the individuals are learning and want to see how Production works. We don't want to give them write access so are stuck.

Therefore to get back on track. Is this a bug or by design. If by design, then what is the difference between a user with read access and an admin with read access and how can we ask for a change?

[richlv]

it's by design, although since 2.2 there's also "host monitoring screen", which shows some config params of hosts (but not other entities). in the issue tracker, there's probably a request to show full config for such users (but you'll have to search for it )