Managing user roles in Zenoss

[Simone Del Pinto]

Simone Del Pinto [http://community.zenoss.org/people/s.delpinto] created the discussion

"Managing user roles in Zenoss"

To view the discussion, visit: http://community.zenoss.org/message/72588#72588

--------------------------------------------------------------
Hi guys,

we need to create a user role that alows certain users to change monitoring ( Production/Preproduction and so on ) but we also need to avoid this user to change other configuration.

Any idea?

I've found a beta ZenPack but unfortunately it doesnt work.

Thanks in advance for any suggestions

Simone
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72588#72588]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: Managing user roles in Zenoss"

To view the discussion, visit: http://community.zenoss.org/message/72590#72590

--------------------------------------------------------------
See:
https://zcaportal.org/wiki/bin/view/ZCA/ZCAFAQ#Can_I_set_granular_permissions_for_users_63 https://zcaportal.org/wiki/bin/view/ZCA/ZCAFAQ#Can_I_set_granular_permissions_for_users_63

But the short answer is buy the commercial product or pay for more dev work.

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72590#72590]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Simone Del Pinto]

Simone Del Pinto [http://community.zenoss.org/people/s.delpinto] created the discussion

"Re: Managing user roles in Zenoss"

To view the discussion, visit: http://community.zenoss.org/message/72592#72592

--------------------------------------------------------------
Hi James,

really isnt there another way to do the same?

I've found this document http://www.skills-1st.co.uk/papers/jane/users_events_zproperties_paper.pdf http://www.skills-1st.co.uk/papers/jane/users_events_zproperties_paper.pdf and with its suggestions I found the checkbox that I need but.. it doesnt work!
Below what I found:

Loading Image... Loading Image...
I've simply created a user "test" with role ZenOperator and then I've checked "change device production state" but when I try to log in with test user teh functionality "command" is inhibited.

Any suggestion?

This thing is driving me crazy...
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72592#72592]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jshardlow]

jshardlow [http://community.zenoss.org/people/jshardlow] created the discussion

"Re: Managing user roles in Zenoss"

To view the discussion, visit: http://community.zenoss.org/message/72859#72859

--------------------------------------------------------------
I think you're on the right track there, as I've been trying to do the same thing. I created a new user role and then used the ZenUser and ZenOperator users as a guide. So I selected the following:

Administrators View, Change Event Views, Define Commands View, Maintenance Windows View, Manage Events, Run Commands, ZenCommon.

Then back in the normal Zenoss front end I assigned that role to a user. Then I added that user to a group and defined the administered devices to that group. At that point I'm pretty sure that the user with the new role could only see the specified devices and that they could manage events.

It's been quite a few weeks since I was playing was this and I can't quite remember how I left it as I've been caught up with other things. So I hope this helps.

Like you, and others I guess, I do find it a bit annoying that a relatively simple concept isn't available, or that the documentation is less than forthcoming on the subject.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72859#72859]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]