Nagios xi multi-tenancy

[jonatgil]

Hello,
Trying to setup a Multi-Tenancy setup so that I limit the view of each department. (If it can be use for that?)
So that Windows departement would only see their windows server. Network department would see network...
But i'm not able to set it up.
Even try to setup a new user/contact and assign it only to one host.
The user always see all the host on the nagios server.

Any idea?

XI_Multi-Tenancy.pdf
https://assets.nagios.com/downloads/nag ... enancy.pdf

[jonatgil]

Contact: Summer-test
Contact group : Summer-group

Host: Windows-srv
Host group: Windows-grp

[tgriep]

What version of Nagios XI are you running on the server?

Can you go to the Admin > Manage Users menu and edit the user in question.
Show how the security settings are configured and post that here.

[jonatgil]

These seems to be pretty normal...
Let me know if you think about something else

Your installation of Nagios XI 5.6.2

Authorization Level: User
Can see all hosts and services: Check
Can control all hosts and services: Check
Can configure hosts and services:
Can access advanced features: Check
Can access monitoring engine:
Read-only access:
API access:
Core Config Manager access: None

[lmiltchev]

The issue that you are having is:

Even try to setup a new user/contact and assign it only to one host.
The user always see all the host on the nagios server.

This is caused by the way you configured your xi user:

Can see all hosts and services: Check
Can control all hosts and services: Check

You need to clear these two check-boxes, and click on "Update User". This way, your user will be able to see ONLY hosts that he/she has been added to as a monitoring contact. Keep in mind that it may take a few minutes before the permissions get "reset".

Let us know if this helped.

[jonatgil]

Thank you.
That make so much sense.
Might be a good idea to update the documentation and to write a small not about it.

Thank you, will test that on Friday.

[lmiltchev]

Might be a good idea to update the documentation and to write a small not about it.

You can click on the question mark next to the "Can see all hosts and services" for more detailed explanation. I believe it's pretty "self-explanatory, and there is no need to additional documentation...

example01.PNG

Thank you, will test that on Friday.

Sure, let us know if this worked for you.

[jonatgil]

Confirming that it's working.
Was not thinking about that when creating user since the request came after creating the user.
Thank you lmiltchev.
Can be closed.

[scottwilkerson]

Confirming that it's working.
Was not thinking about that when creating user since the request came after creating the user.
Thank you lmiltchev.
Can be closed.

Great!

Locking