Different roles for Hosts

[shaak (Sven Haak)]

Hi Community,
we have users who should be able to adminstrate their own hosts, but can view only the current status for some other hosts. I could not find a possiblity to achieve that with roles and contact groups, becaus users always have one role (if multiple roles are active they are combined). Is my understatndig correct or is their a possibility to achieve my goal?
Kind regards,
Sven

[ChristianM (Christian Michaelski)]

Hi,
the rights to view hosts or service belongst to the contact groups the user have. In the roles it is decribed if he can see all or where he is contact for. So, please check your contact rules to find out what happens.
Best regards,
Christian

[LaSoe (Lars Sörensen)]

Hi Sven,

the rights of a role can’t be restricted to a group of servers, services or sites. All rights assigned by a role always apply to all hosts/services that the user can see in the CMK. It’s not possible to give a user edit rights to one group of servers and read only rights to another group of servers.

At least that’s what I understood. Would be happy of course if it is not so because we have the same problem (CME Edition)

Regards, Lars

[shaak (Sven Haak)]

Hi,
thank you for your help.

@ChristianM this is an example of my current setup: I have to WATO folders, restrictedHosts(no contact group) and customerHosts(contact group customer)
Administrators should be able to see and edit all hosts so in their role is the option checked that they can see everything.
The customers have a restriction to their contact group, so they can only see and modify hosts inside customerHosts.
Now I want that customers can also see the hosts in restricted, but not modify them.
The problem is that as far as I understand every user has only one role, so I can not restrict their permission to view only on the restrictedHosts folder,
or am I missing something?

@LaSoe thank you for the information. Yes that is unfortunate, for me it seems to be a common thing todo.

Best regards
Sven