You are correct that in 2.5.2 there isn't a DETAILS link for Locations / Groups / Systems but if you navigate to the relevant organizer there is an Administration tab - that's what you should use.  The reason for doing it from here is that, if you do it from the Groups panel -> Administered Objects tab, you need to change all the included devices.  That panel saves exactly what you see - if you only change your Location (if that's what you have chosen) and you don't change all the individual devices, then the change works for the Location and then promptly changes backk all the individual devices.  Daft - but that's how the Core code works.

Not seeing ZenCommio is very strange - I certainly see that.  Were there any error messages when you installed the ZenPack??   Do you see the ZenOperator role?

Could you navigate to <your zenoss>:8080/zport/manage  (no dmd in this path!!), click on the acl_users directly under the dmd and select roleManager - do you see ZenCommon and/or ZenOperator there??

I have done a little more testing on 2.5.2 and it looks the permissions on all the left-hand menus (like device list, devices, locations, ...) result in a logon prompt but if you configure your dashboard for the GoogleMaps portlet and the Device Issues portlet then you do see the correct, filtered devices / locations and you can Ack / Close events for those devices so I seem to be part way there.  I also see data in performance graphs - both device-level graphs and component graphs.

Cheers,

Jane

Thanks for the prod, Mage Mojo, and sorry to have been so quiet.  I am trying to pull together technical threads and the Zenoss Community Alliance (ZCA) is working to setup a Non Profit Organization to provide a joint funding mechanism - the latter is taking some time as it needs to jump through some governmental political hoops before we can get what we want - but we are getting there!  The guesstimate on the NPO is in the next 3 weeks.

On the technical front, I am struggling to find a way to generate general  reports where the data is filtered by the Administrative Objects that a user has access to - ie you see data in reports just for the devices you manage.  I know some folk defintely want this.  At present, I can do all reports with all data or I can do no reports (and I can now remove REPORTS off the main top menu), but partial reports I still haven't got an answer to.  Does anyone else have any good ideas on this one?? 

Not sure whether Zenoss Enterprise delivers this functionality?? I'm not talking about the Zenoss Insight add-on here - I know that is a completely separate subsystem.  At this stage, I don't want to get into re-writing the whole reports subsystem - though I know that is a high priority for the ZCA to work on and, ultimately, if the ZCA does generate a new reports subsystem then it should work in (even be designed with!!) the concept of user Roles.

This week I am hoping to test out and update the comments that some of you have provided here.

On the point that you often see the wrong numbers of devices in organizers and sometmes the number of events are wrong - this is a couple of known bugs that I reported several months back.  I don't think they are always associated with the userRole work.  Hopefully we will see Zenoss Core 3.2 "real soon now" and they will have fixed these.

I certainly need to checkout your comments about alerting rules - hopefully that will happen this week.  I believe that Event Views are disappearing with Zenoss 3.2.  Do you use this feature lots????

If people would like to contribute requirements here, I am very happy to start the debate about what else we should try to deliver and a debate would help us prioritise ideas.

Cheers,

Jane

Hi Matt,

Thanks for your tests on this and sorry for the long delay in reply!

The mods I have made to the standard code mean that when you add a group/location/system/deviceClass to the Administerd Objects for a user/group, then all contained devices AT THAT TIME also get added. 

I have found the best way to keep containers consistent when devices have been added / deleted from them, is to navigate to the container (say the Location) and use the DETAILS -> Administration link to remove the container from your users/ groups.  Then re-add it back and it will add all the devices that are CURRENTLY contained in that container.

I know this is not ideal, but I think we could add a background script that would do this automatically periodically.  At least it's better than deleting and recreating devices and certainly doesn't compromise your performance data.

When you have time, perhaps you could check that this does actually work for you.

Cheers,

Jane