[ZBXNEXT-1416] Allow granting permission to configure Maintenance Periods without granting full configuration access to host group Created: 2012 Sep 10  Updated: 2022 Oct 04

Status: Reopened
Project: ZABBIX FEATURE REQUESTS
Component/s: Frontend (F), Server (S)
Affects Version/s: 2.0.2
Fix Version/s: None

Type: New Feature Request Priority: Major
Reporter: Robert Parker Assignee: Unassigned
Resolution: Unresolved Votes: 53
Labels: maintenance, permissions
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Zabbix 2.0.2 running on Debian from unstable repository packages.


Issue Links:
Duplicate
duplicates ZBXNEXT-77 Better permission granularity Closed
is duplicated by ZBXNEXT-4245 Request for new feature that supports... Closed
is duplicated by ZBXNEXT-7051 Allow maintenance to be created by Za... Closed
is duplicated by ZBXNEXT-4970 Allow to register the maintenance of... Closed

 Description   

We would like to be able to grant some users the permission to create and modify Maintance Periods for certain host groups, without granting them full configuration access to all aspects of the hosts in those groups.

Perhaps this could be implemented as new User Type such as 'Operator', or a new column (between Read-write and Read-only) in the User Group Permissions screen.

Of course I suspect this might not be simple to implement, and may fall within the scope of the work required for something like ZBXNEXT-77 although that other feature request appears more focused on host-based granularity, whereas this is more about making granular an aspect of configuraiton.



 Comments   
Comment by Robert Cooper [ 2012 Oct 24 ]

This might be easily related to ZBXNEXT-310.

Comment by Sebastiaan Woudenberg [ 2014 May 14 ]

We also would like this additional security level.
We've sysadmins that do maintenance work and need to create maintenance windows in zabbix. These sysadmins don't have enough knowledge of zabbix so it would be best to limit there access. Currently they require read-write access to create maintenance windows in zabbix.

ZBXNEXT-310 is an older request but discribes it even better.

Comment by richlv [ 2014 Jun 19 ]

this should be handled in the context of overall permission granularity, closing in favour of ZBXNEXT-77

Comment by richlv [ 2015 Jan 27 ]

this might be considered w/o full permission redesign, reopening

Comment by Volker Fröhlich [ 2015 Apr 22 ]

This little hack gives an actual meaning to "Read/Write" in the context of a regular user. This might be a good idea, because it allows the implementation without massive changes and may reduce the confusion as of what the heck the "Read/Write" column is for.

http://zabbix.org/wiki/Docs/simplify_ad_hoc_maintenance#POC_implementation

Comment by Elvar [ 2017 Mar 14 ]

I think it's very important for users to be able to set maintenance periods for various hosts and groups without having to be in the Zabbix Administrators group. In fact, the majority of users I have accessing Zabbix I would prefer not be Zabbix Administrators but have the ability to create maintenance schedules.

Comment by Marlon Willrich [ 2017 Apr 27 ]

I would also like this function, very important for larger installations

Comment by Brad Turnbough [ 2017 Apr 28 ]

Add my vote to the list of 'why doesn't this exist yet?' 5 years and counting....

Comment by Jos Hoekstra [ 2017 May 31 ]

We're assigning dev-teams their own credentials for notifications etc, but allow them to set their own maintenance without needing us to set it for them would save us a lot of time.
Please allow for a role of 'maintenance-user' which can set maintenance for hosts assigned to his/her group.
This makes for a better to maintain rights management while still allowing users to manage their own hosts.

Comment by Cesar Murilo da Silva Junior [ 2019 Jan 22 ]


Any news?

Comment by Kornelis [ 2019 May 15 ]

How difficult can it be to add a maintenance role. Would be a nice feature. Is there anyway to work around this? With a script or so?

Comment by Volker Fröhlich [ 2019 May 15 ]

Would my approach work for you @Kornelis?

Comment by Kornelis [ 2019 May 16 ]

@Volker:

Is this script compatible with Zabbix 4.2? And how do i implement this?

Comment by Michal Bartak [ 2019 May 28 ]

I agree this feature would be greatly appreciated!

Thanks

Comment by Nick Zolot [ 2020 Mar 31 ]

@Volker, is it possible to use patch with 4.4? Also, is there any step-by-step instruction how it can be installed?

Comment by Volker Fröhlich [ 2020 Apr 01 ]

Given its age I predict it not to apply cleanly. However, I think that the concept is still sound and just try to do the few things that I did in the patch wherever they belong now.

Comment by Dale [ 2022 Oct 04 ]

This appears to work on 6.0.2 and I'm not sure about other versions.

Add read-write to the host groups you desire via User Groups and then using User Roles you can restrict configuration of Hosts.

I'm not sure if I'm missing anything, but my users can now add maintenance and appear that they cannot configure anything still.

 

Generated at Fri Apr 26 19:01:47 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.