Sharing Hosts

Hey,

I just installed greenbone and set it up for multiple users in my environment.
Everything works well except one thing:

If user A makes a scan that discovers hosts, those hosts cannot be seen only by that user so user B does now know of their existence, i want my users to have access to this information so that we don’t make redundant discovery and scans…
Target, Task ect. all the other objects needed can be seen with no issue. User can enter link to asset from the scan results but get error message " The Host you were looking for could not be found.
You might have followed an incorrect link and the Host does not exist."

My version 22.4

What have i tried so far:

  • Group marked as special gives 0 effect for the group members
  • SuperUser permissions allow the super user to see assets, but i do not want to give all my users superuser.
  • I tried creating new permission “get_assets” for the User role, but even from the super user account i get “Permission denied”. Providing same permission to the special group did nothing.
    This show in logs as
    event permission:MESSAGE:2024-08-01 08h53.46 UTC:238499: Permission could not be created by lgr
  • Sharing hosts one by one works, but with few hundred hosts it is just wayyy to tedious.

Could anyone propose a way on how to share large number of hosts effectively?

2 Likes

Hello @lgr ,
have you found a solution in the mean time?

I face the same challenge.

Best and a good start to 2025
Markus

+1 Same issue! :frowning:

@jt_telrite @justAName @lgr Just share hosts using api. co pilot can write needed scripts in seconds?

Eero

So I’m hearing, “hacky work around” nice!

@jt_telrite

That’s how it is sometimes; with the API, you can even write your own interface with your own access controllers. I create the targets and tasks with scripts and export a PDF. That way, I don’t need to touch the GUI interface.

My own use case is different, but I know that many have built their own interface for OpenVAS.

Eero

As a Systems Engineer responsible for Hundreds applications \ servers \ etc. I don’t like “hacky work arounds” that consume my time… so that devs can be lazy!

@jt_telrite

Maybe it’s worth buying a commercial Greenbone license and talking to their paid support.

Eero

2 Likes

@lgr create group with users and assign targets to that group?

Eero

@lgr @justAName

Using script or disabling granular access control by modifying source code and recompiling.

Eero

Hi, it sounds like the community edition might not be for you.

2 Likes