Icinga2 API credentials

Theking2 · May 27, 2026, 12:34pm

On a fresh install what credentials should I give here:

moreamazingnick · May 27, 2026, 2:16pm

you can either use the root user or create a icingadb user in the same file:

root@icinga-node-:/# cat /etc/icinga2/conf.d/api-users.conf 
/**
 * The ApiUser objects are used for authentication against the API.
 */
object ApiUser "root" {
  password = "******"
  // client_cn = ""

  permissions = [ "*" ]
}

object ApiUser "icingadb-web" {
    password = "CHANGEME"
    permissions = [ "actions/*", "objects/modify/*", "objects/query/*", "status/query" ]
}

here are the docs for that:

github.com/Icinga/icingadb-web

doc/03-Configuration.md

main

# Configuration

If Icinga Web has been installed but not yet set up, please visit Icinga Web and follow the web-based setup wizard.
For Icinga Web setups already running, log in to Icinga Web with a privileged user and follow the steps below to
configure Icinga DB Web:

If you have previously used the monitoring module, there is an option to [migrate](10-Migration.md) some settings.

## Database Configuration

Connection configuration for the database to which Icinga DB synchronizes monitoring data.

1. Create a new resource for the Icinga DB database via the `Configuration → Application → Resources` menu.

2. Configure the resource you just created as the database connection for the Icinga DB Web module using the
   `Configuration → Modules → icingadb → Database` menu.

This configuration is stored in `/etc/icingaweb2/modules/icingadb/config.ini`. The `resource`
option must match the name of the database resource you created for the Icinga DB database,
for example:

This file has been truncated. show original

dont forget to restart icinga2 after changing the file

Theking2 · May 27, 2026, 2:33pm

Got it. It would help to just put the path to that file in this step.

apenning · May 27, 2026, 2:36pm

Thanks for the feedback. Please note that this is documented in the Get Started guide under section 5.3 Icinga 2 API.