Manage users, contacts, and permissions

User permissions and authentication

You manage user permissions in OP5 Monitor as follows:

• By assigning rights to a user group. For more information, see Update user permissions.
• Through the NagVis permissions function, for specific NagVis modules. Note that general rights to access and update NagVis are managed through group rights as for other functions. For more information, see NagVis permissions in Manage NagVis.

OP5 Monitor authentication is managed using authentication drivers. Each driver handles both the authentication of users and resolving group memberships for users. OP5 Monitor includes three authentication drivers — default, LDAP, and Apache.

OP5 Monitor is delivered with a default authentication module based on the default driver, which it uses to authenticate you when you first log in to OP5 Monitor. If you want to change the way users are authenticated when they log in, you can define additional authentication modules, based on one of the three authentication drivers, then associate them with local users you create in OP5 Monitor. For details of how to add or update authentication modules, see Add or update authentication modules.

Create or update a user group

To create or update a user group:

1. Click Manage > Configure.
2. In the Permissions section, click Group rights.
3. If you are creating a new user group, type the name in a blank field on the left.

   Note: To specify a user group that is an existing LDAP or Active Directory user group, ensure that the name matches the existing name.

4. Update user permissions next to the user group, as required. For more information, see Update user permissions.
5. Click Save.

Delete a user group

To delete a user group:

1. Click Manage > Configure.
2. In the Permissions section, click Group rights.
3. Delete the group name in the field on the left.
4. Click Save.

Create a user

To create a new user:

1. Click Manage > Configure.
2. In the Permissions section, click Local users.
3. Specify the user details in the Create new user section, including name, password, authentication modules, and group membership. All of these fields are mandatory.
4. Click Create new user.

Update a user

To update a user:

1. Click Manage > Configure.
2. In the Permissions section, click Local users. OP5 Monitor displays details of existing users.
3. Overwrite the existing user details and click Save username.

Delete a user

To delete a user:

1. Click Manage > Configure.
2. In the Permissions section, click Local users. OP5 Monitor displays details of existing users.
3. Click Delete username.

Create or update a contact group

To create or update a contact group:

1. Click Manage > Configure.
2. In the Checks and notifications section, click Contact groups.
3. If you are updating a contact group, in Contactgroup to edit, select the contact group from the drop-down list and click Go.
4. Enter or update the contact group name details:
   • contactgroup_name — ID of the contact object
   • alias — name of the contact
5. Select the contacts to add as members in members.
6. Select the contact groups to add as members in contactgroup_members.
7. Click Submit.

Delete a contact group

To delete a contact group:

1. Click Manage > Configure.
2. In the Checks and notifications section, click Contact groups.
3. In Contact to edit, search for the contact or select the contact from the drop-down list and click Go.
4. Click Delete.
5. Click Submit.

Create or update a contact

To create a new contact:

1. Click Manage > Configure.
2. In the Checks and notifications section, click Contacts.
3. If you are updating the contact, in Contact to edit, search for the contact or select the contact from the drop-down list and click Go.
4. Select the template.
5. Enter or update the contact name details:
   • contact_name — ID of the contact object
   • alias — name of the contact
6. Update the other contact fields, as required. For more details, see Contact options in Manage templates and time periods.
7. If you want to grant the contact access to OP5 Monitor, check the Configure access rights for this contact checkbox and specify the login details.
8. Click Submit.

Delete a contact

To delete a contact:

1. Click Manage > Configure.
2. In the Checks and notifications section, click Contacts.
3. In Contact to edit, search for the contact or select the contact from the drop-down list and click Go.
4. Click Delete.
5. Click Submit.

List of group rights

Group right	Description of right
File	Permissions to change the object storage file.
Access rights	Permissions to edit access rights. This allows privilege escalation.
PNP	Permissions to edit graph configuration.
Manage Trapper	Permissions to manage handlers, modules, matchers, and logs for Trapper. To view or manipulate sub-states, you need permissions to view and edit the appropriate service, or all services if none match, instead.
Saved filters global	Permissions to create and delete global filters for list views.
Disallow Dangerous Characters	When ticked, disallows you from entering reserved characters ($(;&`~^"|'<>) into the input fields for the Test this check function for services. Any reserved characters will be filtered out and the test will return an error message. This group right is not ticked by default.

Group rights required per OP5 Monitor function

The following table lists the rights you need to use for specific functions of OP5 Monitor.

Function	Rights
Save configuration	Configuration > Export
Host Wizard	Misc > FILE Api > Api Config Host > Host Add Delete Host Template > Host Template View All Hostgroup > Hostgroup View All Management Pack > Management Pack View All Configuration > Export
Share a dashboard	Dashboard > Dashboard Share

Update OP5 Monitor user permissions

Update OP5 Monitor user permissions as follows:

1. Click Manage > Configure.
2. In the Permissions section, click Group rights.
3. Expand the category of rights, or click the Expand all button to view all rights at once.
4. Check the required rights next to the user group. If only some of the rights in a category are selected, the checkbox is displayed with a minus sign instead of a tick.

Tip: Hover your cursor over each group right for a detailed description of its purpose.

Add or update an authentication module

To add or update an authentication module:

1. Click Manage > Configure.
2. In the Permissions section, click Authentication modules.
3. Click Add new module or the tab of the module you want to update.
4. If you are adding a new module, enter the Module Name and select the Driver Type from the drop-down list.
5. Enter the other details for the module.
6. In the common tab, change Default Auth to your new module.
7. If required by your driver (such as Apache), check Enable Auto Login.
8. Click Save.

Delete an authentication module

To delete an authentication module:

1. Click the cross on the tab of the module you want to delete.
2. Click OK in the confirmation prompt.