As we have seen when creating users in Zabbix, we have to add users to groups. So let's have a look at how to create them and see why we need them.
To be able to add user groups, we need a running Zabbix installation with an account that has super administration rights.
- Go to Administration | Users and select from the dropdown on the right user groups. This will give you an overview of all user groups available in Zabbix.
- Next click Create user group to create a new user group.
- First field we can fill in is Group name this is obviously the name we want to give to our group.
- The field Users In group is where we can add some users to our group. From the dropdown menu Other groups, we are able to show all users or some that already belong to another group.
- The Frontend access selection box is how the users from that group will authenticate:
- System default: Use default authentication as set in the authentication menu.
- Internal: Use Zabbix authentication (ignored when using HTTP authentication)
- Disabled: GUI access is forbidden. The Enabled option is obviously to enable or disable our group. Debug mode will enable the debug mode for the users in our group.
- When we switch from the User group tab to the Permissions tab, we are able to tell what access we will give to the users in our group.
- Click on the Add button under Read-write, Read only, or Deny to add hosts or host groups to our user group to give the correct permissions:
- Read only: Members can read the values measured for those hosts and receive messages.
- Read-write: Members of this group can also configure those hosts.
- Deny: The user will not have access to these hosts. Even when permissions are granted in another group, they will still be refused.
Users may belong to any number of user groups. Based on the group they belong to, the user will get access to certain servers. It is also possible that those groups have different access permissions to hosts. This means that a user can belong to a group with read-only permissions and write permissions to the same servers. In this case, the user will get read/write permissions. Since Zabbix 2.2, write permissions will take precedence over read-only permissions.
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.