Assume we need to let a fictitious company Zack Systems to monitor all our routers. But do not allow them to change our configuration.
Administration » ACL » Actions Access
Add Zack Actions. Enable acknowledge service, set downtime, schedule check,…etc
Administration » ACL » Resources Access
Add Zack Resource. In the Host Resources tab, add the Routers host group. All hosts in that group can be seen.
All routers to be monitored by Zack Systems should be put into that host group.
Administration » ACL » Menus Access
Add Zack Menu. Don't include configuration and related menu items.
Configuration » Users » Contact Groups
Add Zack Systems. Use this to hold user accounts of Zack's staff.
Administration » ACL » Access Groups
Add Zack Systems. Then do:
Linked Contact Groups. Authorizations information tab, add the created Zack resource, action and menu items.
Finally, create required contacts for Zack Systems. Link these accounts to Contact Group Zack Systems.