User Permissions

[bosecorp]

ok, I am going to try that in my lab first

[tmcdonald]

Keep us posted!

[bosecorp]

let's take a step back here. somehow I managed to get this working with doing everything that we discussed

I have the following relationship

host escalation ==> contact groups and host groups

this works but not consistently, I checked one of the users and is missing one or two devices

why

[jdalrymple]

The escalations aren't providing the visibility for other users are they?

Sorry, I'm going to repeat the problem just because it's so confusing/backwards and I need to keep it straight.

We want users to be able to see hosts/services
We don't want users to get notifications *proper*
We do want users to get escalations

What step was it that gave visibility for the other users - it wasn't the escalations was it?

[bosecorp]

Apparently, through the escalation setup, users are able to use almost what they supposed to see. my users from APAC can see APAC devices. all I had to do is setup escalations, like I said earlier, the host escalation has the contact group and the host group. this almost works but is not consistently. some users are missing 1 or two devices. I checked the devices and they don't have anything different from the ones that they can see

from the notification perspective, I am all set. I already had that setup and has work fine since we setup Nagios. notifications are handle via escalation. all devices and service have only one contact defined consistently.

all I am trying to setup is multi-tenant. so that my regional users can only see their respective devices, I don't want my regional users to be able to see all devices that I have all over the world

[jdalrymple]

So let's look at this:

like I said earlier, the host escalation has the contact group and the host group

Can you verify that the devices are added to the hostgroups consistently? Meaning are the hostgroups added from within the host properties, or are the hosts added from within the hostgroup properties, and if they aren't consistent is it possible that this is the difference between the devices that are seen and those that aren't? Additionally - are we absolutely certain that the escalations are working for all the devices and all the users?

Quite honestly - I'm surprised you're able to grant privileges via escalation.

[bosecorp]

Hi I would like to continue to working on this.

to summarize, I can;t add every host to the contact group because of the way I have alerting setup. I handle alerting via HOST ESCALATION. so adding a contact to a host will not work for me.

however because the host escalation configuration I have it seems to be working for some users. some users are able to see what they only suppose to see. I don;t how that is working. for the users that is working. The users is part of a contact group and then via HOST ESCALATION I put everything together. a host escalaction item has that contact group that user is part of and also has a hostgroup has some specific devices.

[Box293]

I think we should take this into a support ticket so we can help you through a remote session. @jdalrymple is no longer with us and we'll be starting all over again.

Please send an email to [email protected] referencing this forum thread and we'll take it from there. Reply to this thread when you have done this so we can confirm we received the email.

[bosecorp]

done

[hsmith]

We have received the ticket. I'll lock the thread so we can continue communication there.