ACL

« Centreon Broker | ACL | Advanced »

ACL

It is possible to configure ACL rules in order to restrict access to non admin users.

../../_images/acl_1.png

Access Groups

Obviously, you will need to have contacts and/or contact groups defined before going any further. You can now start with the Access Group configuration:

../../_images/acl_conf_1.png
Field name Description
Group Name Name for identifying the Access Group
Alias Short description of the Access Group
Linked Contacts Users who will be part of the Access Group
Linked Contact Groups Contact Groups that will be part of the Access Group

Action Access Rules

Define the action privileges that will be granted to the Access groups.

Global Functionalities

Action name Elements on Centreon User Interface
Display Top Counter ../../_images/acl_conf_8.png
Display Top Counter pollers statistics ../../_images/acl_conf_9.png
Display Poller Listing ../../_images/acl_conf_10.png

Global Actions on Monitoring Engine

Action name Elements on Centreon User Interface
Shutdown Monitoring Engine ../../_images/acl_conf_11.png
Restart Monitoring Engine
Enable/Disable notifications
Enable/Disable service checks
Enable/Disable passive service checks
Enable/Disable host checks
Enable/Disable passive host checks
Enable/Disable Event Handlers
Enable/Disable Flap Detection
Enable/Disable Obsessive service checks
Enable/Disable Obsessive host checks
Enable/Disable Performance Data

Actions on Services

Action name Elements on Centreon User Interface
Enable/Disable Checks for a service

Monitoring service detail page:

../../_images/acl_conf_12.png
Enable/Disable passive checks of a service
Enable/Disable Notifications for a service
Enable/Disable Event Handler for a service
Enable/Disable Flap Detection of a service
Acknowledge/Disacknowledge a service
Re-schedule the next check for a service

Monitoring service detail page:

../../_images/acl_conf_13.png
Re-schedule the next check for a service (Forced)
Schedule downtime for a service
Add/Delete a comment for a service
Submit result for a service

Actions on Hosts

Action name Elements on Centreon User Interface
Enable/Disable Checks for a host

Monitoring host detail page:

../../_images/acl_conf_14.png
Enable/Disable passive checks of a host
Enable/Disable Notifications for a host
Enable/Disable Event Handler for a host
Enable/Disable Flap Detection for a host
Acknowledge/Disacknowledge a host
Re-schedule the next check for a host
Re-schedule the next check for a host (Forced)
Schedule downtime for a host
Add/Delete a comment for a host
Submit result for a host

Resource Access Rules

At last, you can restrict access on the Hosts and Services.

../../_images/acl_conf_15.png
Field name Description
Access list name Name of the Access Rule
Description Short description of the Access Group
Linked Groups ACL rule will be applied to these Access Groups
Status Whether or not the rule is enabled
Comments Optional comments regarding the rule

You can define the Access Rule in the next configuration tabs:

../../_images/acl_conf_17.png

First of all, you need to put the list of allowed Hosts or Host Groups or Service Groups in the Access Rule. Then you may filter out these Hosts / Services for a more accurate end result of what the Access Group can view.

../../_images/acl_2.png