OP5 Monitor - How OP5 Monitor works in relation to grouprights

Group rights (or grouprights) are the permissions that are granted users by being members of a certain group. This list details what the different permissions mean in the OP5 Monitor product.

nagios auth

This category contains system and configuration settings. Click the + sign to expand the category.

system information

Grants the user access to the system/process information.

configuration information

Grants the user access to the configuration tool. Further permissions are required to see or edit anything therein.

system commands

Grants the user permission to issue system commands in the web gui. For host/service commands, see 'host edit' and 'service edit', respectively.

api

This category contains settings for the HTTP-API. Click the +-sign to expand the category.

api command

Grants the user access to the HTTP-API commands interface which allows users to send external commands to nagios. Authorized commands are dependent on if the user have 'system_commands' for system-wide commands, 'host edit' and 'service edit' for host/service specific commands

api config

Grants the user access to the HTTP-API configuration interface which allows users to create, change and delete the configuration of monitoring objects like hosts and services.

api report

Grants the user access to the HTTP-API report interface which allows users to fetch report data in a raw uncomputed form.

api status

Grants the user access to the HTTP-API status interface which allows users to fetch the status of monitoring objects like hosts and services.

api perfdata

Grants the user access to the HTTP-API perfdata interface which allows users to fetch the perfdata of monitoring objects like hosts and services.

host

This category contains settings for host access. Click the +-sign to expand the category.

host add delete

Grants the user permissions to add and delete hosts.

host view all

Grants the user permissions to view all hosts.

host view contact

Grants the user permissions to view hosts that they are contact for.

host edit all

Grants the user permissions to edit all existing hosts. This means nagios commands, and possibly also object configuration, depending on configuration information.

host edit contact

Grants the user permissions to edit hosts that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.

test this host

Grants the user permissions to use the 'test this host' functionality in the configuration tool. This can usually be used as shell access.

host commands

This category contains settings for host commands. Click the +-sign to expand the category.

host command acknowledge

Grants the user permissions to add and remove problem acknowledgements on hosts.

host command add comment

Grants the user permissions to add comments on a host.

host command schedule downtime

Grants the user permissions to schedule host downtimes.

host command check execution

Grants the user permissions to start/stop check executions of host checks and acceptance of passive checks on a host and it's services.

host command event handler

Grants the user permissions to start and stop event handlers associated with hosts.

host command flap detection

Grants the user permissions to start and stop flap detection on hosts.

host command obsess

Grants the user permissions to start and stop obsessing on hosts.

host command notifications

Grants the user permissions to start and stop notifications from being sent on a host and it's services.

host command passive check

Grants the user permissions to send passive check results to hosts.

host command schedule check

Grants the user permissions to (re)schedule checks on a host and it's services.

host command send notification

Grants the user permissions to send notifications for hosts.

service

This category contains settings for service access. Click the +-sign to expand the category.

service add delete

Grants the user permissions to add and delete services.

service view all

Grants the user permissions to view all services.

service view contact

Grants the user permissions to view services that they are contact for.

service edit all

Grants the user permissions to edit all existing services. This means nagios commands, and possibly also object configuration, depending on configuration information.

service edit contact

Grants the user permissions to edit services that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.

test this service

Grants the user permissions to use the 'test this host' functionality in the configuration tool. This can usually be used as shell access.

service commands

This category contains settings for service commands. Click the +-sign to expand the category.

service command acknowledge

Grants the user permissions to add and remove problem acknowledgements on services.

service command add comment

Grants the user permissions to add comments on a service.

service command schedule downtime

Grants the user permissions to schedule service downtimes.

service command check execution

Grants the user permissions to start and stop executions of service checks and acceptance of passive checks on a service.

service command event handler

Grants the user permissions to start and stop event handlers associated with services.

service command flap detection

Grant the user permissions to start and stop flap detection on services.

service command notifications

Grants the user permissions to start and stop notifications from being sent on services.

service command passive check

Grant the user permissions to send passive check reults to services.

service command schedule check

Grants the user permissions to (re)schedule checks on services.

service command send notification

Grants the user permissions to send notifications for services.

service command obsess

Grants the user permissions to start and stop obsessing on services.

hostgroup

This category contains settings for hostgroup access. Click the +-sign to expand the category.

hostgroup add delete

Grants the user permissions to add and delete hostgroups.

hostgroup view all

Grants the user permissions to view all hostgroups.

hostgroup view contact

Grants the user permissions to view hostgroups that they are contact for.

hostgroup edit all

Grants the user permissions to edit all existing hostgroups. This means nagios commands, and possibly also object configuration, depending on configuration information.

hostgroup edit contact

Grants the user permissions to edit hostgroups that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.

hostgroup commands

This category contains settings for hostgroup commands. Click the +-sign to expand the category.

hostgroup command schedule downtime

Grants the user permissions to schedule downtimes for hosts that are members of hostgroups.

hostgroup command check execution

Grants the user permissions to start and stop executions of host checks and acceptance of passive checks of hosts that are members of hostgroups.

hostgroup command send notifications

Grants the user permissions to send notifications for hosts that are members hostgroups.

servicegroup

This category contains settings for servicegroup access. Click the +-sign to expand the category.

servicegroup add delete

Grants the user permissions to add and delete servicegroups.

servicegroup view all

Grants the user permissions to view all servicegroups.

servicegroup view contact

Grants the user permissions to view servicegroups that they are contact for.

servicegroup edit all

Grants the user permissions to edit all servicegroups. This means nagios commands, and possibly also object configuration, depending on configuration information.

servicegroup edit contact

Grants the user permissions to edit servicegroups that they are contact for. This means nagios commands, and possibly also object configuration, depending on configuration information.

servicegroup commands

This category contains settings for servicegroup commands. Click the +-sign to expand the category.

servicegroup command schedule downtime

Grants the user permissions to schedule downtimes for services that are members of servicegroups.

servicegroup command check execution

Grants the user permissions to start and stop executions of service checks and acceptance of passive checks of services that are members of servicegroups.

servicegroup command send notifications

Grants the user permissions to send notifications for services that are members servicegroups.

hostdependency

This category contains settings for hostdependency access. Click the +-sign to expand the category.

hostdependency add delete

Grants the user permissions to add and delete hostdependencies.

hostdependency view all

Grants the user permissions to view hostdependencies.

hostdependency edit all

Grants the user permissions to edit hostdependencies.

servicedependency

This category contains settings for servicedependency access. Click the +-sign to expand the category.

servicedependency add delete

Grants the user permissions to add and delete servicedependencies.

servicedependency view all

Grants the user permissions to view servicedependencies.

servicedependency edit all

Grants the user permissions to edit servicedependencies.

hostescalation

This category contains settings for hostescalation access. Click the +-sign to expand the category.

hostescalation add delete

Grants the user permissions to add and delete hostescalations.

hostescalation view all

Grants the user permissions to view hostescalations.

hostescalation edit all

Grants the user tight to edit hostescalations.

serviceescalation

This category contains settings for serviceescalation access. Click the +-sign to expand the category.

serviceescalation add delete

Grants the user permissions to add and delete serviceescalations.

serviceescalation view all

Grants the user permissions to view serviceescalations.

serviceescalation edit all

Grants the user permissions to edit serviceescalations.

contact

This category contains settings for managing contacts. Click the +-sign to expand the category.

contact add delete

Grants the user permissions to add and delete contacts.

contact view all

Grants the user permissions to view contacts.

contact edit all

Grants the user permissions to edit contacts.

contact view contact

Grants the user permissions to view the contact attached to the user.

contact edit contact

Grants the user permissions to edit the contact attached to the user.

contactgroup

This category contains settings for managing contactgroups. Click the +-sign to expand the category.

contactgroup add delete

Grants the user permissions to add and delete contactgrops.

contactgroup view all

Grants the user permissions to view contactgroups.

contactgroup edit all

Grants the user permissions to edit contactgroups.

contactgroup view contact

Grants the user permissions to view contactgroups they are a member of.

contactgroup edit contact

Grants the user permissions to edit contactgroups they are a member of.

timeperiod

This category contains settings for managing timperiods. Click the +-sign to expand the category.

timeperiod add delete

Grants the user permissions to add and delete timeperiods.

timeperiod view all

Grants the user permissions to view timeperiods.

timeperiod edit all

Grants the user permissions to edit timeperiods.

command

This category contains settings for managing commands. Click the +-sign to expand the category.

command add delete

Grants the user permissions to add and delete commands.

command view all

Grants the user permissions to view commands.

command edit all

Grants the user permissions to edit commands.

test this command

Grants the user permissions to use the 'test this command' functionality in the configuration tool. This can usually be used as shell access.

host template

This category contains settings for managing host templates. Click the +-sign to expand the category.

host template view all

Grants the user permissions to view host templates.

host template edit all

Grants the user permissions to edit host templates.

host template add delete

Grants the user permissions to add and delete host templates.

service template

This category contains settings for managing service templates. Click the +-sign to expand the category.

service template view all

Grants the user permissions to view service templates.

service template edit all

Grants the user permissions to edit service templates.

service template add delete

Grants the user permissions to add and delete service templates.

contact template

This category contains settings for managing contact templates. Click the +-sign to expand the category.

contact template view all

Grants the user permissions to view contact templates.

contact template edit all

Grants the user permissions to edit contact templates.

contact template add delete

Grants the user permissions to add and delete contact templates.

management pack

This category contains settings for management pack. Click the +-sign to expand the category.

management pack add delete

Grants the user permissions to add and delete management pack.

management pack view all

Grants the user permissions to view management pack.

management pack edit all

Grants the user permissions to edit management pack.

dokuwiki

This category contains settings for dokuwiki access. Click the +-sign to expand the category.

wiki

Grants the user permissions to view, create and change dokuwiki pages for objects they are authorized to see.

wiki admin

Grants the user permissions to access the dokuwiki admin panel.

nagvis

This category contains settings for global NagVis access. Click the +-sign to expand the category.

nagvis view

Global permission to view all nagvis maps.

nagvis edit

Global permission to edit all nagvis maps.

nagvis add delete

Global permission to add and delete all nagvis maps.

nagvis admin

Get full permission for nagvis, including global configuration

logger

This category contains settings for the Logger extension. Click the +-sign to expand the category.

logger access

Grants the user permission to view and access the Logger extension.

logger configuration

Grants the user permission to modify settings for the Logger extension.

logger schedule archive search

Grants the user permission to schedule searches in the archived logs.

business services

This category contains settings for business services. Click the +-sign to expand the category.

business services access

Grants the user permission to business services access.

trapper

This category contains settings for traps view all. Click the +-sign to expand the category.

traps view all

Grants the user permission to traps view all.

misc

This category contains miscellaneous settings. Click the +-sign to expand the category.

file

Grants the user permissions to change file in which an object is stored.

access rights

Grants the user permissions to edit access rights. This allows privilege escalation.

pnp

Grants the user permissions to edit graph configuration.

configuration

This category contains settings for permissions to export configurations. Click the +-sign to expand the category.

export

Grants the user permissions to export their own configuration changes.

configuration all

Grants the user permissions to export and import all configuration changes.

saved filters global

Grants permissions to manage global filters

manage trapper

Grants permission to manage handlers, modules, matchers and logs for trapper. Note: to view/manipulate substates, you need service view/edit to the appropriate service (or to all, if none matches) instead.

lookup_user

Type a username and click Lookup to get a list of the groups the user is a member of.

filter_groups

Type a text you want to filter against and press Filter Groups.
No wildcards are needed.
Empty filter will display all groups.

dashboard

Settings for a dashboard

dashboard share

Allows the user to share their dashboards to other users and user groups.