User permissions - Security settings

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
ITOMB_IMT
Posts: 181
Joined: Wed Oct 17, 2018 12:55 pm

User permissions - Security settings

Post by ITOMB_IMT »

Hi,

we are using Nagios Xi 5.8.5 and some users are assigned with Authentication Level as USER. under security settings they have been assigned with Can configure hosts and services. I know by this, user can add/modify hosts and services. IS there a way we can limit access to hots, as users were deleting hosts on their own.

Thanks,
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: User permissions - Security settings

Post by ssax »

What permissions do they have set in Admin > Manage Users? (please attach a screenshot)

They should only see the hosts/services that they are a contact on either directly or through contact groups in the CCM (depending on CCM permissions).

There isn't currently a way to limit it further.

See here for reference:

https://assets.nagios.com/downloads/nag ... enancy.pdf
ITOMB_IMT
Posts: 181
Joined: Wed Oct 17, 2018 12:55 pm

Re: User permissions - Security settings

Post by ITOMB_IMT »

Thanks for the reply. Please see attached screenshot of the permissions given to one of the user. User needs permission to configure services not hosts as they were from different team (client) but not hosts, how can i lock down configuring hosts.

Thanks,
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: User permissions - Security settings

Post by ssax »

I do not see anything attached, please re-attach. Make sure you click the Add the File button after selecting the file with the Browse button.
ITOMB_IMT
Posts: 181
Joined: Wed Oct 17, 2018 12:55 pm

Re: User permissions - Security settings

Post by ITOMB_IMT »

ITOMB_IMT wrote:Thanks for the reply. Please see attached screenshot of the permissions given to one of the user. User needs permission to configure services not hosts as they were from different team (client) but not hosts, how can i lock down configuring hosts.

Thanks,
sorry for missing attachment.

Thanks,
You do not have the required permissions to view the files attached to this post.
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: User permissions - Security settings

Post by ssax »

Unfortunately, there is no read-only CCM access, limited automatically gives them access to delete hosts/services they are a contact of in the CCM.

And the Can configure hosts and services permissions gives them the ability to delete the hosts/services they are a contact of.

You would currently need to disable Can configure hosts and services and set the Core Config Manager access to None to prevent them from deleting host/services from the CCM and while viewing the host/service under the Reconfigure tab.
Locked