Nagios Support Forum

Hi All,

We have a few queries regarding the users and contacts. I have created the user and added it as contact to one host but still the user is unavailable to view the devices and when I enabled the view to all devices, now he is able to see all the devices. So please let me know is there any possible way to achieve the below.

1 ) I want to make the devices visible to the user for which they are notification contacts

2) Can I add the acknowledge problem in service detail / host detail page with out giving access to control all the devices in user settings page.

A user (who is also a monitoring contact) will see only the hosts/services he/she is assigned to as a monitoring contact (unless you select "Can see all hosts and services" under the Admin->Manage Users->Edit->Security Settings.

For more info on XI user's rights, please, review this document:

http://assets.nagios.com/downloads/nagi ... Rights.pdf

Thanks for your reply, I am able to resolve the first problem i.e user could see only the devices where he is the monitoring contact.

but regarding the user acknowledgements, even I made him the monitoring contact it is not resolving the issue.

Please let me know if any additional settings needs to be done.

Adding acknowledgements is a system level command. What options does your user currently have on that object, I don't think they will be able to do it properly.

the user is having read only access option and able to view all the hosts in the nagios xi. how to add the option to acknowledge the alerts in nagios xi.

the user is having read only access option and able to view all the hosts in the nagios xi. how to add the option to acknowledge the alerts in nagios xi.

I don't believe a user should be able to acknowledge alerts (submit commands, etc.) if he/she has a READ ONLY access...

When I have enabled the option Can control all hosts and services: in the security settings, he is able to acknowledge the issue but it is also giving the option to disable the notification. I just want the user to be assigned with the acknowledge option but not disabling the notifications. Can we do this by any chance?

You could remove read only access, can control all hosts and services. Leave view all hosts and services. This should give them the ability to view all hosts and services. It might or might not give them the access to acknowledge alerts, if not you will have to add them as a contact to either the host or service objects that you wish them to be able to acknowledge for. See if that meets your request.

By doing steps mentioned in below email, I can partially achieve my requirement but it is giving the user to right of disabling the notification which I don't want give the user. Is there any other way we can do it from the back end by editing the code just only to give the rights to acknowledge the alert.

This is actually how core works. As an acknowledgement uses the cmd.cgi, rights to acknowledge are part of permitted actions if a user has access to the cmd.cgi. Unfortunately for your situation, that also means they inherit all the other permissions to deal with the cgi. This is working as intended and perfectly matches the core behavior. Changing this behavior requires changing the way nagios core does authentication, which is no small task. You are welcome to put in a feature request (http://tracker.nagios.com) for XI as an intermediary php script may be able to do this.