User permissions

[BanditBBS]

I am going to write a script that keeps track of on-call rotation. What I originally was going to do, was have the script write to the static config, the members of a contact group and then restart NagiosXI. The issue doing this, the people I remove for the week from the contact group will then not be able to see anything in NagiosXI, correct? Is there anyway to give a user rights to a host/service group without making them part of the list of people getting alerts for those hosts/services?

If I am correct in my above assumption, my next idea would be to have the script modify the user and "uncheck" the enable notifications under their XI account. That way, they would still have permissions to see the hosts/service groups but would not be getting the alerts.

Care to tell me the table and field that is?

[abrist]

we will have to wait for someone down here who knows the XI sql better than I. But, I do have one idea. You could add everyone to a second contact group that does not notify, but is attached to all the proper hosts. This way you can remove them from the notification group without removing their ability to see the hosts.

[BanditBBS]

we will have to wait for someone down here who knows the XI sql better than I. But, I do have one idea. You could add everyone to a second contact group that does not notify, but is attached to all the proper hosts. This way you can remove them from the notification group without removing their ability to see the hosts.

That intrigues me. How can I add a contactgroup to a host or service and have it not alert one group but alert another?

[abrist]

Separate groups unfortunately. So everyone would be in a certain handful of groups that has no notification options enabled (this is so they can always view those hosts). They would also be in a different handful of groups that have notifications enabled. The latter groups would be the ones you could add/remove contacts with your script through the static dir. You could do the same thing with templates as well. Or you could set up full notification timeperiods for all contacts. This will work well for weekly alternating on-call shifts, but may be pita for less uniform shifts/time periods.

[mguthrie]

It is an option to have each of these users be able to see all hosts and services, but only receive notifications for some?

[BanditBBS]

abrist, I understand what you are saying. My confusion is regarding how I can have multiple contactgroups assigned to a service or host and it not alert all the contactgroups. I am unaware of a setting that makes the contactgroup not get notifications.

[BanditBBS]

It is an option to have each of these users be able to see all hosts and services, but only receive notifications for some?

No, or that would be easy We have ~150 users in IT separated into many groups that should not see each other's items.

[abrist]

!! I apologize, as I forgot to mention a vital portion of this. You would control all notifications from a contact template level, and then change which contact groups are associated with the different templates. Contact groups alone cannot do what I suggested.

[mguthrie]

Yeah, that is going to be tricky then. Notifications can enabled/disabled for hosts/services, or for individual contacts. It's possible you could attempt to get creative with escalations, but that might potentially add a lot of needless complexity to the situation.

[BanditBBS]

!! I apologize, as I forgot to mention a vital portion of this. You would control all notifications from a contact template level, and then change which contact groups are associated with the different templates. Contact groups alone cannot do what I suggested.

Ohhh, now that is making much more sense now My day is over now, I'll play around with that idea and see if I can figure it out tomorrow.