I had previously set up Icinga 2 and Icinga Web 2 for my own infrastructure monitoring needs. I wanted to expand this to allow other users to have a limited view into the monitoring system and see just their own assets (hosts and services). The biggest hurdle for me was determining the correct filter syntax. This post describes the steps I took to configure a role in Icinga 2 for limited access to the monitoring system.