Hi.

I've created some users in Icingaweb2 and assigned them a role which has 
pretty much all permissions except for "allow config access (config/*)" because 
I want these users to be able to do all the normal monitoring stuff, but not 
change the configuration (and specifically not see or modify other user 
accounts).

However, once I do this, I can't see how to enable these users to manage their 
own passwords - because the entire "Authentication" menu is gone, including 
for their own account.

Obviously I can set an initial password to allow them to log in, but I want 
them then to be able to change it to something of their own choosing and which 
I do not know.

I assume there's somethng I can add to /etc/icingaweb2/roles.ini to allow 
these users to manage their own accounts, but I have no idea where to find out 
what it needs to be.

Is there either a list somewhere of the permissions which can be put into 
roles.ini, or at least for this requirement, can someone tell me what I need 
to add to allow users to manage their own accounts, but not anybody else's?


Thanks,


Antony.

-- 
I don't know, maybe if we all waited then cosmic rays would write all our 
software for us. Of course it might take a while.

 - Ron Minnich, Los Alamos National Laboratory

                                                   Please reply to the list;
                                                         please *don't* CC me.
_______________________________________________
icinga-users mailing list
icinga-users@lists.icinga.org
https://lists.icinga.org/mailman/listinfo/icinga-users

Reply via email to