Page 1 of 1

Contactgroup users cannot access machines

Posted: Mon Dec 14, 2015 1:40 pm
by ChathamDaleJ
If I add a user to a contactgroup, they cannot access hosts/services for which that contactgroup is a member.

Re: Contactgroup users cannot access machines

Posted: Mon Dec 14, 2015 4:26 pm
by hsmith
What version of XI are you running?

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 10:46 am
by ChathamDaleJ
You guys don't make it easy to discern. We downloaded less than a month ago. It says it's current.

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 11:47 am
by hsmith
ChathamDaleJ wrote:It says it's current.
Thanks for the information. I'll do some testing and get back to you.
ChathamDaleJ wrote:You guys don't make it easy to discern.
5.png
If you have any suggestions to put the version number elsewhere, I'd be happy to open a feature request for you.

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 1:28 pm
by ChathamDaleJ
5.2.2 64 bit running the Nagios appliance.

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 1:41 pm
by hsmith
What are you trying to do with this user? What rights did you give the user? Mine can view the device just fine.

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 2:39 pm
by ChathamDaleJ
We currently (Nagios Open Source) have no contacts assigned to hosts are services. All are assigned as contact groups.

What I want is the functionality of putting a user into a host or service with contact_groups. It may be that I made some kind of error, but I don't think

I want to add users to a contact_group and have that user be able to see and edit machines/services for which they are a member of a contact group.
I do not seem to be able to do that.

I guess my question is really "should that work". If so, I'll retrace my steps.

Thanks!

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 3:25 pm
by rkennedy
Just to make sure we're on the same page, what you're looking for is a way to change user permissions based on what contact_group users are in. Is this correct?

At the time, I don't believe this is possible. However, I can submit a feature request for this if you'd like?

Currently, to allow access to users who can modify hosts / services, you will need to navigate to the Admin -> Manage Users section of Nagios XI. From there, you can assign permissions for your users. Here's a screenshot of what's available.
user-security-settings.PNG

Re: Contactgroup users cannot access machines

Posted: Tue Dec 15, 2015 3:28 pm
by ChathamDaleJ
Yes exactly. User is configured as a user, can (Re)configure is checked as is "advanced features".

The contactgroup is working for read only access to the machine, Contact group member, howerver, cannot access CCM.

I want them to be able to edit host/service settings.

Thanks!

Dale

Re: Contactgroup users cannot access machines

Posted: Wed Dec 16, 2015 10:13 am
by ssax
Currently you have to be an admin user in order to edit anything in the CCM.

When you select "Can (re)configure hosts and services" it means:
The user can re-configure and delete existing hosts and services (which they can see)
from the monitoring configuration, and add new hosts and services to the monitoring
configuration.
That doesn't include the CCM though.

You can read more about user rights and multi-tenancy here:

https://assets.nagios.com/downloads/nag ... Rights.pdf
https://assets.nagios.com/downloads/nag ... enancy.pdf