How to set up a role just for scheduling downtime

[TheBee]

Hi everyone,

I´m having trouble setting up a profile for our service crew so they can just view a list of filtered services and schedule a downtime for them.

They have links like this and are supposed to schedule a downtime when they work on these specific services.

(https://myhost/cmk/check_mk/index.py?start_url=%2Fcmk%2Fcheck_mk%2Fview.py%3Ffilled_in%3Dfilter%26search%3DSearch%26service_label%3D%255B%257B%2522value%2522%253A%2B%2522Instance%253Ainstancename%2522%257D%255D%26view_name%3Dsearchsvc%26_show_filter_form%3D0)

It works fine with an admin account, but I want to set up a role just for this task. I started with the default “viewer” role, but not even this role is working. I always get a dashboard related error (in web.log) when logging in with this role.

I tried to set up a new one and added permissions

• Set/Remove downtimes
• See user views
• Add comments
• Permission to all dashboards

and I fiddled around trying other combinations of permissions but nothing seems to work. I always get the dashboard related error. That happens when I log in normally or when I log in after I opened the link above.

Any help appreciated.

[mike1098 (Michael FRANK)]

Hello,

I would recommend to do the reverse way.
Duplicate the role guest and remove step by step the rights. Test each step if still all is working as expected.
For the GUI you need at least “Use the GUI at all” but probably more.
To control access to the service itself you can use Contact Groups and the rule “Assignment of services to contact groups”.

regards

Michael

[TheBee]

Thank you for the tipp. It sounded good at the beginning and approached this several times now. The problem is that the guest role by default can not schedule a downtime and I just couldn´t figure out the correct combination of permissions.
But with this approach the crash didn´t happen again, so that´s a win and a good starting point.