Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-6146

Tenanted user in Zabbix by group, adding a host can see all configured Zabbix proxies

    XMLWordPrintable

Details

    • Change Request
    • Status: Open
    • Trivial
    • Resolution: Unresolved
    • None
    • None
    • None
    • None
    • Zabbix 5.0.1

    Description

      I wanted to tenant off Zabbix for multiple private environments. And with that comes security and visibility of neighboring information.

      Steps to reproduce:

      1. Create host groups intended for private tenancy and segregated permission sets of hosts - TenantA/hosts  TenantB/Hosts etc
      2. Have multiple zabbix proxy hosts configured. ( in scenario, proxy-A, Proxy-B etc)
      3. Elevate one user from private tenant A to Zabbix Administrator in order to be able to create hosts
      4. Zabbix Administrator with permissions to hosts:
        1. ALL - NON
        2. TenantA = READ/WRITE

      Result:
      When creating a host, in allowed host group, the user can see all other configured Zabbix proxy servers.

      Ideal outcome:
      Restrictions on Zabbix proxy visibility when creating hosts , relative to  to host groups in order to show/hide based on permissions sets.

       

      Tenant A, adding a host, should only see Tenant A Zabbix proxy or no proxy , or have this forced on the user somehow to their proxy , if applicable.

      Attachments

        Activity

          People

            Unassigned Unassigned
            vtcv Chris Voulgaropoulos
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: