From 2b3853d01cb6a9f534f1a435da6b1d2632c54138 Mon Sep 17 00:00:00 2001 From: Eric Lippmann Date: Fri, 28 Jul 2017 11:28:35 +0200 Subject: [PATCH] Doc: Relax Icinga 2 API user permissions Fixes #2884 --- modules/monitoring/doc/commandtransports.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/modules/monitoring/doc/commandtransports.md b/modules/monitoring/doc/commandtransports.md index 57aaf1e28..2703ae2d2 100644 --- a/modules/monitoring/doc/commandtransports.md +++ b/modules/monitoring/doc/commandtransports.md @@ -32,12 +32,11 @@ to the host where you want to send the commands to. We recommend to create/edit ``` object ApiUser "web2" { password = "bea11beb7b810ea9ce6ea" // Change this! - permissions = [ "actions/*", "objects/modify/hosts", "objects/modify/services", "objects/modify/icingaapplication" ] + permissions = [ "status/query", "actions/*", "objects/modify/*", "objects/query/*" ] } ``` -The permissions `actions/*`, `objects/modify/hosts`, `objects/modify/services`, `objects/modify/icingaapplication` are -mandatory in order to submit all external commands from within Icinga Web 2. +The permissions are mandatory in order to submit all external commands from within Icinga Web 2. **Restart Icinga 2** for the changes to take effect.