Page 1 of 1

Nagios XI permissions and contacts

Posted: Mon Jan 14, 2019 3:32 am
by atsb
Hi!

About nagios XI environment
1) Linux Distribution and version? Centos7
2) 32 or 64bit? 64bit
3) VMware Image or Manual Install of XI? Manual install
4) Are there special configurations on your system, ie; is Gnome installed? Are you using a proxy? Are you using SSL? SSL
5) NagiosXI version: 5.5.8

Got a question about nagios XI permissions and contacts. We have a user/contact that gets email and sms and in some host cases only emails. For only emails i made one additional contact using notify-host-by-mail and notify-service-by-email commands and set that contact to this host, it works great BUT now the actual user he uses to access web interface does not have permissions for example to "Force an immediate check" since hes user is bind to another contact(sms and email). Is there any way to bind a user to multiple contacts or accomplish this in some other way?
The requirments are that this user should get sms and emails for Host A and only emails for Host B and at the same time he should have permission to "Force an immediate check" on host A and B.

Thank you!

Re: Nagios XI permissions and contacts

Posted: Mon Jan 14, 2019 4:06 pm
by benjaminsmith
Hi @astb,

You could increase the security settings for this user. Go to Admin > Manage Users > Username and increase the authorization levels so this user can Control All Hosts and Services. From Manage Users, on the far right you can masquerade as the user by selecting the 'eye' icon and test.

Re: Nagios XI permissions and contacts

Posted: Tue Jan 15, 2019 2:16 am
by atsb
Hi!

That means he gets permissions to all servers.Is there any other way?

Re: Nagios XI permissions and contacts

Posted: Tue Jan 15, 2019 12:20 pm
by benjaminsmith
Hello @astb,

Users are still allowed to run commands, such as force immediate check, on hosts and services they are contacts of, so this user would have to be configured as a contact for host A and host B.

Try creating a contact group for SMS/Email and contact group for Email only and assign those contact groups to the respective hosts along with the user to each host so they can run commands on both hosts A and B.

Re: Nagios XI permissions and contacts

Posted: Wed Jan 16, 2019 2:30 am
by atsb
Hello!

Wait, wait, how do you create a group for SMS only or Email/SMS only? There is no such option to choose notification commands for whole group.
nagios_group.PNG

Re: Nagios XI permissions and contacts

Posted: Wed Jan 16, 2019 12:22 pm
by benjaminsmith
Hi @astb,

Since you want this user to be able to run commands they have to be associated with both host A and host B. To get the notifications to work as required, I would suggest creating a separate contact along with a contact group for email only and another contact/contact group for email and sms, and add your user to both contact groups. I believe you have that working, but the sms and email user notification commands will have set correctly for the appropriate contacts.

In the alert settings, host A will be configured to the sms + email contact group, and host B will be configured to the email only contact group, and since the user is associated both contact groups they will be able to run commands on those hosts, but receive either email or sms+email based on the contact group for the host.