How OP5 Monitor works in relation to grouprights
This documentation was generated from in-product help text Copied
These descriptions can be found in pop-ups in the product, as well as in /opt/monitor/op5/nacoma/js/grouprights_helptexts.json
Group rights (or grouprights) are the permissions that are granted users by being members of a certain group. This list details what the different permissions mean in the OP5 Monitor product.
nagios auth Copied
This category contains system and configuration settings. Click the + sign to expand the category.
system information Copied
Grants the user access to the system/process information.
configuration information Copied
Grants the user access to the configuration tool. Further permissions are required to see or edit anything therein.
system commands Copied
Grants the user permission to issue system commands in the web gui. For host/service commands, see ‘host edit’ and ‘service edit’, respectively.
api Copied
This category contains settings for the HTTP-API. Click the +-sign to expand the category.
api command Copied
Grants the user access to the HTTP-API commands interface which allows users to send external commands to nagios. Authorized commands are dependent on if the user have ‘system_commands’ for system-wide commands, ‘host edit’ and ‘service edit’ for host/service specific commands
api config Copied
Grants the user access to the HTTP-API configuration interface which allows users to create, change and delete the configuration of monitoring objects like hosts and services.
api report Copied
Grants the user access to the HTTP-API report interface which allows users to fetch report data in a raw uncomputed form.
api status Copied
Grants the user access to the HTTP-API status interface which allows users to fetch the status of monitoring objects like hosts and services.
api perfdata Copied
Grants the user access to the HTTP-API perfdata interface which allows users to fetch the perfdata of monitoring objects like hosts and services.
host Copied
This category contains settings for host access. Click the +-sign to expand the category.
host add delete Copied
Grants the user permissions to add and delete hosts.
host view all Copied
Grants the user permissions to view all hosts.
host view contact Copied
Grants the user permissions to view hosts that they are contact for.
host edit all Copied
Grants the user permissions to edit all existing hosts. This means nagios commands, and possibly also object configuration, depending on configuration information.
host edit contact Copied
Grants the user permissions to edit hosts that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.
test this host Copied
Grants the user permissions to use the ’test this host’ functionality in the configuration tool. This can usually be used as shell access.
host commands Copied
This category contains settings for host commands. Click the +-sign to expand the category.
host command acknowledge Copied
Grants the user permissions to add and remove problem acknowledgements on hosts.
host command add comment Copied
Grants the user permissions to add comments on a host.
host command schedule downtime Copied
Grants the user permissions to schedule host downtimes.
host command check execution Copied
Grants the user permissions to start/stop check executions of host checks and acceptance of passive checks on a host and it’s services.
host command event handler Copied
Grants the user permissions to start and stop event handlers associated with hosts.
host command flap detection Copied
Grants the user permissions to start and stop flap detection on hosts.
host command obsess Copied
Grants the user permissions to start and stop obsessing on hosts.
host command notifications Copied
Grants the user permissions to start and stop notifications from being sent on a host and it’s services.
host command passive check Copied
Grants the user permissions to send passive check results to hosts.
host command schedule check Copied
Grants the user permissions to (re)schedule checks on a host and it’s services.
host command send notification Copied
Grants the user permissions to send notifications for hosts.
service Copied
This category contains settings for service access. Click the +-sign to expand the category.
service add delete Copied
Grants the user permissions to add and delete services.
service view all Copied
Grants the user permissions to view all services.
service view contact Copied
Grants the user permissions to view services that they are contact for.
service edit all Copied
Grants the user permissions to edit all existing services. This means nagios commands, and possibly also object configuration, depending on configuration information.
service edit contact Copied
Grants the user permissions to edit services that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.
test this service Copied
Grants the user permissions to use the ’test this host’ functionality in the configuration tool. This can usually be used as shell access.
service commands Copied
This category contains settings for service commands. Click the +-sign to expand the category.
service command acknowledge Copied
Grants the user permissions to add and remove problem acknowledgements on services.
service command add comment Copied
Grants the user permissions to add comments on a service.
service command schedule downtime Copied
Grants the user permissions to schedule service downtimes.
service command check execution Copied
Grants the user permissions to start and stop executions of service checks and acceptance of passive checks on a service.
service command event handler Copied
Grants the user permissions to start and stop event handlers associated with services.
service command flap detection Copied
Grant the user permissions to start and stop flap detection on services.
service command notifications Copied
Grants the user permissions to start and stop notifications from being sent on services.
service command passive check Copied
Grants the user permissions to send passive check results to services.
service command schedule check Copied
Grants the user permissions to (re)schedule checks on services.
service command send notification Copied
Grants the user permissions to send notifications for services.
service command obsess Copied
Grants the user permissions to start and stop obsessing on services.
hostgroup Copied
This category contains settings for hostgroup access. Click the +-sign to expand the category.
hostgroup add delete Copied
Grants the user permissions to add and delete hostgroups.
hostgroup view all Copied
Grants the user permissions to view all hostgroups.
hostgroup view contact Copied
Grants the user permissions to view hostgroups that they are contact for.
hostgroup edit all Copied
Grants the user permissions to edit all existing hostgroups. This means nagios commands, and possibly also object configuration, depending on configuration information.
hostgroup edit contact Copied
Grants the user permissions to edit hostgroups that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.
hostgroup commands Copied
This category contains settings for hostgroup commands. Click the +-sign to expand the category.
hostgroup command schedule downtime Copied
Grants the user permissions to schedule downtimes for hosts that are members of hostgroups.
hostgroup command check execution Copied
Grants the user permissions to start and stop executions of host checks and acceptance of passive checks of hosts that are members of hostgroups.
hostgroup command send notifications Copied
Grants the user permissions to send notifications for hosts that are members hostgroups.
servicegroup Copied
This category contains settings for servicegroup access. Click the +-sign to expand the category.
servicegroup add delete Copied
Grants the user permissions to add and delete servicegroups.
servicegroup view all Copied
Grants the user permissions to view all servicegroups.
servicegroup view contact Copied
Grants the user permissions to view servicegroups that they are contact for.
servicegroup edit all Copied
Grants the user permissions to edit all servicegroups. This means nagios commands, and possibly also object configuration, depending on configuration information.
servicegroup edit contact Copied
Grants the user permissions to edit servicegroups that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.
servicegroup commands Copied
This category contains settings for servicegroup commands. Click the +-sign to expand the category.
servicegroup command schedule downtime Copied
Grants the user permissions to schedule downtimes for services that are members of servicegroups.
servicegroup command check execution Copied
Grants the user permissions to start and stop executions of service checks and acceptance of passive checks of services that are members of servicegroups.
servicegroup command send notifications Copied
Grants the user permissions to send notifications for services that are members servicegroups.
hostdependency Copied
This category contains settings for hostdependency access. Click the +-sign to expand the category.
hostdependency add delete Copied
Grants the user permissions to add and delete hostdependencies.
hostdependency view all Copied
Grants the user permissions to view hostdependencies.
hostdependency edit all Copied
Grants the user permissions to edit hostdependencies.
servicedependency Copied
This category contains settings for servicedependency access. Click the +-sign to expand the category.
servicedependency add delete Copied
Grants the user permissions to add and delete servicedependencies.
servicedependency view all Copied
Grants the user permissions to view servicedependencies.
servicedependency edit all Copied
Grants the user permissions to edit servicedependencies.
hostescalation Copied
This category contains settings for hostescalation access. Click the +-sign to expand the category.
hostescalation add delete Copied
Grants the user permissions to add and delete hostescalations.
hostescalation view all Copied
Grants the user permissions to view hostescalations.
hostescalation edit all Copied
Grants the user rights to edit hostescalations.
serviceescalation Copied
This category contains settings for serviceescalation access. Click the +-sign to expand the category.
serviceescalation add delete Copied
Grants the user permissions to add and delete serviceescalations.
serviceescalation view all Copied
Grants the user permissions to view serviceescalations.
serviceescalation edit all Copied
Grants the user permissions to edit serviceescalations.
contact Copied
This category contains settings for managing contacts. Click the +-sign to expand the category.
contact add delete Copied
Grants the user permissions to add and delete contacts.
contact view all Copied
Grants the user permissions to view contacts.
contact edit all Copied
Grants the user permissions to edit contacts.
contact view contact Copied
Grants the user permissions to view the contact attached to the user.
contact edit contact Copied
Grants the user permissions to edit the contact attached to the user.
contactgroup Copied
This category contains settings for managing contactgroups. Click the +-sign to expand the category.
contactgroup add delete Copied
Grants the user permissions to add and delete contactgroups.
contactgroup view all Copied
Grants the user permissions to view contactgroups.
contactgroup edit all Copied
Grants the user permissions to edit contactgroups.
contactgroup view contact Copied
Grants the user permissions to view contactgroups they are a member of.
contactgroup edit contact Copied
Grants the user permissions to edit contactgroups they are a member of.
timeperiod Copied
This category contains settings for managing timeperiods. Click the +-sign to expand the category.
timeperiod add delete Copied
Grants the user permissions to add and delete timeperiods.
timeperiod view all Copied
Grants the user permissions to view timeperiods.
timeperiod edit all Copied
Grants the user permissions to edit timeperiods.
command Copied
This category contains settings for managing commands. Click the +-sign to expand the category.
command add delete Copied
Grants the user permissions to add and delete commands.
command view all Copied
Grants the user permissions to view commands.
command edit all Copied
Grants the user permissions to edit commands.
test this command Copied
Grants the user permissions to use the ’test this command’ functionality in the configuration tool. This can usually be used as shell access.
host template Copied
This category contains settings for managing host templates. Click the +-sign to expand the category.
host template view all Copied
Grants the user permissions to view host templates.
host template edit all Copied
Grants the user permissions to edit host templates.
host template add delete Copied
Grants the user permissions to add and delete host templates.
service template Copied
This category contains settings for managing service templates. Click the +-sign to expand the category.
service template view all Copied
Grants the user permissions to view service templates.
service template edit all Copied
Grants the user permissions to edit service templates.
service template add delete Copied
Grants the user permissions to add and delete service templates.
contact template Copied
This category contains settings for managing contact templates. Click the +-sign to expand the category.
contact template view all Copied
Grants the user permissions to view contact templates.
contact template edit all Copied
Grants the user permissions to edit contact templates.
contact template add delete Copied
Grants the user permissions to add and delete contact templates.
management pack Copied
This category contains settings for management pack. Click the +-sign to expand the category.
management pack add delete Copied
Grants the user permissions to add and delete management pack.
management pack view all Copied
Grants the user permissions to view management pack.
management pack edit all Copied
Grants the user permissions to edit management pack.
dokuwiki Copied
This category contains settings for dokuwiki access. Click the +-sign to expand the category.
wiki Copied
Grants the user permissions to view, create and change dokuwiki pages for objects they are authorized to see.
wiki admin Copied
Grants the user permissions to access the dokuwiki admin panel.
nagvis Copied
This category contains settings for global NagVis access. Click the +-sign to expand the category.
nagvis view Copied
Global permission to view all nagvis maps.
nagvis edit Copied
Global permission to edit all nagvis maps.
nagvis add delete Copied
Global permission to add and delete all nagvis maps.
nagvis admin Copied
Get full permission for nagvis, including global configuration
logger Copied
This category contains settings for the Logger extension. Click the +-sign to expand the category.
logger access Copied
Grants the user permission to view and access the Logger extension.
logger configuration Copied
Grants the user permission to modify settings for the Logger extension.
logger schedule archive search Copied
Grants the user permission to schedule searches in the archived logs.
business services Copied
This category contains settings for business services. Click the +-sign to expand the category.
business services access Copied
Grants the user permission to business services access.
trapper Copied
This category contains settings for traps view all. Click the +-sign to expand the category.
traps view all Copied
Grants the user permission to traps view all.
misc Copied
This category contains miscellaneous settings. Click the +-sign to expand the category.
file Copied
Grants the user permissions to change file in which an object is stored.
access rights Copied
Grants the user permissions to edit access rights. This allows privilege escalation.
pnp Copied
Grants the user permissions to edit graph configuration.
configuration Copied
This category contains settings for permissions to export configurations. Click the +-sign to expand the category.
export Copied
Grants the user permissions to export their own configuration changes.
configuration all Copied
Grants the user permissions to export and import all configuration changes.
saved filters global Copied
Grants permissions to manage global filters
manage trapper Copied
Grants permission to manage handlers, modules, matchers and logs for trapper. Note: to view/manipulate substates, you need service view/edit to the appropriate service (or to all, if none matches) instead.
lookup_user Copied
Type a username and click Lookup to get a list of the groups the user is a member of.
filter_groups Copied
Type a text you want to filter against and press Filter Groups. No wildcards are needed. Empty filter will display all groups.
dashboard Copied
Settings for a dashboard
dashboard share Copied
Allows the user to share their dashboards to other users and user groups.