Role-Based Pause Policies: Control Who Can Pause and for How Long
As an IT Infrastructure Manager, I want to define per user group which pause options are available (e.g., time-limited only, no "Pause indefinitely") and to extend time-limited pause/resume rights to read-only users, so that no monitoring gap goes unnoticed and my team can manage planned downtime while following least-privilege principles.
Background:
Currently, users and administrators have the option to “Pause indefinitely” for sensors, devices, or groups. In our environment, this poses a risk, as paused objects can easily be forgotten and monitoring gaps may occur.
I have not been able to find any built-in feature in PRTG that would allow us to disable or restrict the “Pause indefinitely” option globally or on a per-role basis.
Furthermore, now you can make a read only user and set that he can acknowledge errors/warnings, but in our use case we have many situation that we don't just have to acknowledge but also put in downtime for a certain amount of time (pause in PRTG) But that option is not available on a read only user. We don't want to implement a user with more rights in our general monitoring for security reasons. Would be nice feature to have if a read only account can not only acknowledge but also set a pause.
Yannik
shared this idea
-
Thomas van Haute
commented
As an IT Infrastructure Manager, I want to grant pause/resume rights to read-only users per user or per user group (analogous to the existing "Acknowledge Alarms" toggle) so that I can follow least-privilege principles while still enabling my operations team to handle planned downtime independently.
Background:
Now you can make a read only user and set that he can acknowledge errors/warnings, but in our use case we have many situation that we don't just have to acknowledge but also put in downtime for a certain amount of time (pause in PRTG) But that option is not available on a read only user. We don't want to implement a user with more rights in our general monitoring for security reasons. Would be nice feature to have if a read only account can not only acknowledge but also set a pause.