Business Process Intelligence v2.31 Permissions

[David.Donahoe]

Our read only account (Dash) can view all BPI groups despite not being listed in the Authorized Users. We are runing Nagios XI with Nagios BPI v2.31. I also want to double check for if there is a fix for this. If a top level group has Dash as an Authorized User will he be able to drill down into sub-groups in which he is not listed as an Authorized User.

[slansing]

Does this user have any other permissions? Has it's contact been assigned to any of the BPI objects or anything like that? I am unable to reproduce this with a test user that only has read_only permissions, on XI 2014 r1.1

[David.Donahoe]

Sorry for the delay. The user has "Can see all hosts and services" and "Has read-only Access"

[tmcdonald]

If you remove the "Can see all hosts and services" is the user still able to view all BPI groups?

[David.Donahoe]

As "read only" with out "can see all hosts and services", they do not see any groups. I add them as an authorized user on the main group and the top tier sub groups. They can now see the main group but none of the sub-groups. I made sure they were authorized users on the sub groups. I am not sure if they can not see the sub groups because they can not see the members of the sub groups. Quoted from the help tooltip "the group state will be calculated based on the "visible" group members". My desire to create a simple view to show if the web portal and main applications are up without the users seeing the servers and services monitored is a pipe dream for now.

[tmcdonald]

What XI version are you on? I am also unable to reproduce this on the latest development version.