[ZBXNEXT-1416] Allow granting permission to configure Maintenance Periods without granting full configuration access to host group Created: 2012 Sep 10 Updated: 2022 Oct 04 |
|
Status: | Reopened |
Project: | ZABBIX FEATURE REQUESTS |
Component/s: | Frontend (F), Server (S) |
Affects Version/s: | 2.0.2 |
Fix Version/s: | None |
Type: | New Feature Request | Priority: | Major |
Reporter: | Robert Parker | Assignee: | Unassigned |
Resolution: | Unresolved | Votes: | 53 |
Labels: | maintenance, permissions | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified | ||
Environment: |
Zabbix 2.0.2 running on Debian from unstable repository packages. |
Issue Links: |
|
Description |
We would like to be able to grant some users the permission to create and modify Maintance Periods for certain host groups, without granting them full configuration access to all aspects of the hosts in those groups. Perhaps this could be implemented as new User Type such as 'Operator', or a new column (between Read-write and Read-only) in the User Group Permissions screen. Of course I suspect this might not be simple to implement, and may fall within the scope of the work required for something like |
Comments |
Comment by Robert Cooper [ 2012 Oct 24 ] |
This might be easily related to |
Comment by Sebastiaan Woudenberg [ 2014 May 14 ] |
We also would like this additional security level.
|
Comment by richlv [ 2014 Jun 19 ] |
this should be handled in the context of overall permission granularity, closing in favour of |
Comment by richlv [ 2015 Jan 27 ] |
this might be considered w/o full permission redesign, reopening |
Comment by Volker Fröhlich [ 2015 Apr 22 ] |
This little hack gives an actual meaning to "Read/Write" in the context of a regular user. This might be a good idea, because it allows the implementation without massive changes and may reduce the confusion as of what the heck the "Read/Write" column is for. http://zabbix.org/wiki/Docs/simplify_ad_hoc_maintenance#POC_implementation |
Comment by Elvar [ 2017 Mar 14 ] |
I think it's very important for users to be able to set maintenance periods for various hosts and groups without having to be in the Zabbix Administrators group. In fact, the majority of users I have accessing Zabbix I would prefer not be Zabbix Administrators but have the ability to create maintenance schedules. |
Comment by Marlon Willrich [ 2017 Apr 27 ] |
I would also like this function, very important for larger installations |
Comment by Brad Turnbough [ 2017 Apr 28 ] |
Add my vote to the list of 'why doesn't this exist yet?' 5 years and counting.... |
Comment by Jos Hoekstra [ 2017 May 31 ] |
We're assigning dev-teams their own credentials for notifications etc, but allow them to set their own maintenance without needing us to set it for them would save us a lot of time. |
Comment by Cesar Murilo da Silva Junior [ 2019 Jan 22 ] |
|
Comment by Kornelis [ 2019 May 15 ] |
How difficult can it be to add a maintenance role. Would be a nice feature. Is there anyway to work around this? With a script or so? |
Comment by Volker Fröhlich [ 2019 May 15 ] |
Would my approach work for you @Kornelis? |
Comment by Kornelis [ 2019 May 16 ] |
@Volker: Is this script compatible with Zabbix 4.2? And how do i implement this? |
Comment by Michal Bartak [ 2019 May 28 ] |
I agree this feature would be greatly appreciated! Thanks |
Comment by Nick Zolot [ 2020 Mar 31 ] |
@Volker, is it possible to use patch with 4.4? Also, is there any step-by-step instruction how it can be installed? |
Comment by Volker Fröhlich [ 2020 Apr 01 ] |
Given its age I predict it not to apply cleanly. However, I think that the concept is still sound and just try to do the few things that I did in the patch wherever they belong now. |
Comment by Dale [ 2022 Oct 04 ] |
This appears to work on 6.0.2 and I'm not sure about other versions. Add read-write to the host groups you desire via User Groups and then using User Roles you can restrict configuration of Hosts. I'm not sure if I'm missing anything, but my users can now add maintenance and appear that they cannot configure anything still.
|