Hi,

This is a question about setting up permissions with Icingaweb2.

We're curently setting up Icinga2 and Icingaweb2 as our global monitoring.
To authenticate the users, we use an Apache module (Single Sign On) which let 
only allowed users to access the web ui.
Icingaweb2 is configured with /etc/icingaweb2/authentication.ini :
[icingaweb2]
strip_username_regexp = ""
backend             = "external"

Only one user is declared as global admin in /etc/icingaweb2/roles.ini :
[admins]
users               = "bancal"
permissions         = "*"

For each server monitored with Icinga is defined a UserGroup which defines who 
will receive email alerts. These persons are client-users.

What we'd like to set is :
- Every global-admin has admin view on all hosts (this is already the case)
- Every client-users has an admin view on the hosts he is member of and no view 
on other hosts monitored.

Is there a way to achive this?

Thanks!
Regards,
Samuel Bancal

--
Samuel Bancal
ENAC-IT
EPFL

_______________________________________________
icinga-users mailing list
[email protected]
https://lists.icinga.org/mailman/listinfo/icinga-users

Reply via email to