Page 1 of 1

User permissions - Security settings

Posted: Tue Feb 15, 2022 10:30 am
by ITOMB_IMT
Hi,

we are using Nagios Xi 5.8.5 and some users are assigned with Authentication Level as USER. under security settings they have been assigned with Can configure hosts and services. I know by this, user can add/modify hosts and services. IS there a way we can limit access to hots, as users were deleting hosts on their own.

Thanks,

Re: User permissions - Security settings

Posted: Wed Feb 16, 2022 10:03 am
by ssax
What permissions do they have set in Admin > Manage Users? (please attach a screenshot)

They should only see the hosts/services that they are a contact on either directly or through contact groups in the CCM (depending on CCM permissions).

There isn't currently a way to limit it further.

See here for reference:

https://assets.nagios.com/downloads/nag ... enancy.pdf

Re: User permissions - Security settings

Posted: Wed Feb 16, 2022 5:53 pm
by ITOMB_IMT
Thanks for the reply. Please see attached screenshot of the permissions given to one of the user. User needs permission to configure services not hosts as they were from different team (client) but not hosts, how can i lock down configuring hosts.

Thanks,

Re: User permissions - Security settings

Posted: Thu Feb 17, 2022 5:24 pm
by ssax
I do not see anything attached, please re-attach. Make sure you click the Add the File button after selecting the file with the Browse button.

Re: User permissions - Security settings

Posted: Fri Feb 18, 2022 1:45 pm
by ITOMB_IMT
ITOMB_IMT wrote:Thanks for the reply. Please see attached screenshot of the permissions given to one of the user. User needs permission to configure services not hosts as they were from different team (client) but not hosts, how can i lock down configuring hosts.

Thanks,
sorry for missing attachment.

Thanks,

Re: User permissions - Security settings

Posted: Mon Feb 21, 2022 5:02 pm
by ssax
Unfortunately, there is no read-only CCM access, limited automatically gives them access to delete hosts/services they are a contact of in the CCM.

And the Can configure hosts and services permissions gives them the ability to delete the hosts/services they are a contact of.

You would currently need to disable Can configure hosts and services and set the Core Config Manager access to None to prevent them from deleting host/services from the CCM and while viewing the host/service under the Reconfigure tab.