How to add a user with limited visibility
Introduction to Group Rights for limited visibility Copied
To achieve limited visibility for specific users, you will need to work with group rights permissions. The good news is OP5 Monitor has predefined groups with limited permissions already. To view these, simply navigate to “Configure -> Group rights”
- admins
- default
- limited_edit
- limited_view
For this article’s purpose we will use the “limited_view” group, as this group has the following specific permissions set (see the screenshot below):
- Service Commands
- Hostgroup
- Hostdependency
- Contact Template
- Command
- Business Service
These permissions define what permissions users in the “limited_view” group have access to.
Create a user & assign limited visibility Copied
The steps below outline how to successfully add a user with limited visibility on specific hosts and with limited menu items.
Step 1 - Add a contact Copied
- Navigate to “Configure -> Contacts” and create a new contact. REMEMBER: the contact_name will be the username for login.
- Enter the required fields for the contact. If you enter the email address or pager (for GSM enabled monitoring) this user will receive notifications.
- In this example we use the user “monitor_only” but you can name your user however you prefer.
Step 2 - (Optional) Create a user with access rights & group membership Copied
- Scroll down and check the box “enable_access” which will provide additional details about the contact. This step creates a “local” user for OP5.
- REQUIRED: Select the Auth Module (Default, is typical) and Group Membership “limited_view group”.
Note: Step 2 is not required if a user already exists, locally or in Active Directory or LDAP.
Click Submit, then also Save your changes.
Step 3 - Set the contact as a “contact” for hosts Copied
Configure a host and set your newly created contact to a host. Remember OP5 users are grouped into user groups, to which you can assign permissions for specific components and functions of OP5 Monitor.
Submit, and Save your changes.
Step 4 - Verify the user permissions Copied
Now log out and log in as the user monitor_only and you should only see the hosts you have assigned user monitor_only as a contact to.
Step 5 - (Optional) Limiting the menu items for specific groups Copied
You can also limit the menu items available to specific groups by following these few steps.
- Log in as an “Admin” level user. Click your username in the upper right-hand corner, then click on My Account
- Click “edit user menu”
- Select the group in this case “limited_view”. Check the boxes for items you wish this group to have access to.
-
REMEMBER: The features you select will only allow the users to view what you have given the access to specifically.
-
Hit Save new settings! once done