[ZBX-24546] MFA can't be assigned/enabled for existing groups Created: 2024 May 25  Updated: 2024 Jun 26

Status: Confirmed
Project: ZABBIX BUGS AND ISSUES
Component/s: Documentation (D), Frontend (F)
Affects Version/s: 7.0.0rc2, 7.0.0, 7.2.0alpha1
Fix Version/s: None

Type: Problem report Priority: Critical
Reporter: Raimond Kollman Assignee: Zabbix Development Team
Resolution: Unresolved Votes: 1
Labels: MFA
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Zabbix 7.0rc2 on Ubuntu 24.04 LTS

Attachments: PNG File Scherm­afbeelding 2024-05-25 om 14.46.38.png    
Sprint: Support backlog

 Description   

Steps to reproduce:

  1. Enable MFA TOTP
  2. Navigate to User groups
  3. Select a group
  4. There is no option to enable MFA for this existing group

Result:
See screenshot

I can however create a new User group and enable MFA for this group, but this can't be done for already existing User groups

 Comments   
Comment by Edgar Akhmetshin [ 2024 May 27 ]

Hello Raimond

Are you talking about system default user groups like Internal or Zabbix administrators?

Any user group created has an option to modify settings during creation or after with no issues.

Regards,
Edgar

Comment by Raimond Kollman [ 2024 May 27 ]

Hi,

This is the case for created user groups. I now can replay this.

When a Super-user is also User of a group you want to modify, you can't enable MFA for this group.
So a super-user can't assign MFA to already existing groups. To accomplish this, the super-user first has to be decoupled from this group -> Assign MFA > be reassigned to this group again.

Maybe this is a feature, but this isn't really clearly stated somewhere.

Generated at Thu Apr 10 21:55:47 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.