Limit users to do commands & actions for hosts in the own contactgroup

12 votes

Although the visibility can be larger, users should only be able to do actions and commands on hosts, which are in the contact group of the user

Not planned User management Suggested by: Thomas Lippert (30 May, '22) • Upvoted: 07 Jan, '23 • Comments: 3

Comments: 3

02 Jun, '22
Robert Sander
Could be a new permission.
17 Dec, '22
Lars Sörensen
As an example, we have a team that is responsible for the specific application and therefore needs to be able to perform actions and commands on the associated host/Services.

Since there Application has certain dependencies to other Services like a Firewall as example which are provided by other teams they want to see also the status of these services in the GUI. To ensure the segregation of duties they shold no have any right to do anything on the Hosts/Services of other Teams.

Since contactgroups are used to define what a user can see in the GUI you could extend the contactgroups with a readonly flag. Then we could assign a readonly contactgroup to the services the Team need to be able to see without the right to do anything.
18 Oct, '23
Mohamed Saleh Admin
Hello,

Thank you for your idea. On this portal, we carefully evaluate ideas to ensure that they will benefit a wide range of users. Thus, we close ideas not fulfilling certain criteria:

- Suggestions with low user interest: created more than 1 year ago with 5 votes or less
- Suggestions with no momentum: no votes in the last 6 months

Unfortunately, this suggestion doesn't meet these criteria, so we’re closing it (based on the data available until 2023-10-17). We appreciate your contribution and encourage you to continue to share your ideas. Your input plays a vital role in helping us improve our product for everyone.

Thank you for your understanding and continued support!

Warm regards,
Your Checkmk Team