User with change control privs can't update hosts

[brdr]

Hi Nagios Support,

We have XI 5.2.2.

When I go into Manage Users, and alter a non-admin user Security Settings so that the user can now reconfig or add a host I see an issue.

The security settings boxes that are checked for the user is:
- Can see all hosts and services
- Can (re)configure hosts and services
- Can control all hosts and services
- Can access advanced features

The issue occurs when I log into Nagios and then go hit Configure tab I will see in the center of screen the 'Nagios CCM Login' with 'Username' nagiosadmin and 'Password'. Note: I do see the the normal CCM side bar.

What am I missing

thx

[lmiltchev]

The issue occurs when I log into Nagios and then go hit Configure tab I will see in the center of screen the 'Nagios CCM Login' with 'Username' nagiosadmin and 'Password'. Note: I do see the the normal CCM side bar.

Do you want this user to be able to access the CCM or not? Can you show clarify, and show us a screenshot of what you see?

Do you have a separate CCM login setup for this user?

Admin->System Settings->Separate CCM Login = checked->Update Settings

[brdr]

I do want this user to have the ability to configure hosts/services without being an admin. Please find attached screenshots... Thx.

[ssax]

Only admins will be automatically logged into the CCM, you can give someone access (they will still need to type in the credentials that you set) under Configure > Core Config Manager > Config Manager Admin > Manage Config Access.

[brdr]

Thx ssax. That worked! Just so I'm clear...

Step 1.
Update following security settings for given user..
- Can see all hosts and services
- Can (re)configure hosts and services
- Can control all hosts and services
- Can access advanced features

Step 2.
Go to -> Configure > Core Config Manager > Config Manager Admin > Manage Config Access
Add new user (same user from Step 1.) with a new password
NOTE: We use AD, so user will authenticate when the first log in, then they will need to enter new passwd for CCM access.

Do customers generally setup a generic account that multiple users can use when accessing CCM?

[lmiltchev]

NOTE: We use AD, so user will authenticate when the first log in, then they will need to enter new passwd for CCM access.

That is correct. It is a "separate" CCM login.

Do customers generally setup a generic account that multiple users can use when accessing CCM?

I don't believe this is a very good idea. If you had a few users logged in as the same "CCM user", it would be difficult to keep track of who did what... Also, keep in mind that it doesn't really matter what are the security settings of these users. Once they have a CCM login, they have full administrative access.

[brdr]

Yeah, that was my next question regarding user's security settings. and makes sense about generic admin account.

Thanks! plz close.