Allow user to only access screens in Zabbix

[marcosmcb]

How can I go about allowing a specific user to have access to a set of screens / graphs without allowing them to access triggers nor other information, but the graphs/screens.

Note: I have tried to grant access to thoses graphs by sharing them with the specific user and his group, but it didn't work though. I believe It must have something related to the privileges that the user has got.

Can I not just allow the user access a handful of graphs without granting them permissions to access any other host information?

Thanks in advance folks!

[linuxtechie]

May be a circumvention, but how about using Graffana?

[marcosmcb]

Thanks for your reply @linuxtechie

I took a look at Grafana, here http://play.grafana-zabbix.org/dashb...na-zabbix-demo and here http://docs.grafana-zabbix.org/ .

But, unfortunately, Grafana doesn't really let me do what I want to. I was looking for some way of allowing a specific user, with low privileges, to have access to graphs and screens that I want to, It unfortunately doesn't seem to be possible because the hosts that yield those screens and graphs aren't in my user's group, and even if they were, I couldn't let my user see the triggers and some other stuff just related to the host.

Cheers anyway!

[kloczek]

How can I go about allowing a specific user to have access to a set of screens / graphs without allowing them to access triggers nor other information, but the graphs/screens.

It is not possible to do this in zabbix and limiting access such way does not make any sense.
Screen is only presentation layer object. To have data presented over screen you need to have access RO to host data. As long as you have such access limiting such access to only exact form of presenting these data is a bit overkill.

[arapacana]

If I may pick up this thread a bit late...

There IS a very good use-case scenario for this: when I, as an ISP, wish to provide only graphs of bandwidth usage for a given customer to that customer only, and to disallow that customer to see anything but the specific graphs I have selected for them to see.

Cacti does this very well; you can assign a single graph or an entire host to a specific user, so that user can log in and will see just the information you want them to and no more.

Can Zabbix 5.4.4 (current version as of writing) not do this somehow?

[arapacana]

Thanks for the reply and the ... hack/workaround. I was exploring options and ended up installing a local version of Grafana, and the Zabbix plugin for Grafana... so now Grafana gets the Zabbix data and I made the relevant dashboards in Grafana, individual users and teams (one user per team), then put the dashboards into separate folders and removed permissions on those folders for viewing, except for the relevant user, who has view only privs. Now not only can a user get just the data i want to show on a graph-by-graph basis, but they can also use the Grafana tools to change how they view their data. Took a few hours of setup and I don't reallllly like the idea of adding more baubles to the string of things that can fail, but so far it seems to be a good workaround that is a little more robust... in case my resolution helps out anyone else.

[preart]

Didn't this feature appear in Zabbix 6.0.12?
You need to give the user access to one separate chart.