NCM Firmware Upgrade Feature Request - VOTE

Currently only NCM Administrators & NPM Administrators can use the firmware upgrade features available.

We have tested, and these are working well, we are about to test the stack switch upgrade (another feature request coming so this is not a workaround) but I cannot give engineers the permissions without giving them system admin rights also!

under iso 27001 and psn compliance there must be appropriate separation of duties and security. You can have all staff who have permissions to upgrade firmware change any settings in the entire solarwinds system - including their own permissions!

Please vote using the below link - thank you

Find more posts tagged with

Security

firmware upgrade

Accepted answers

All comments

jpetkevich

mezdem Would it be suitable to allow NCM admin rights instead of system admin rights in your case?

mikeit83

I agree- we need to be able to give engineers the capability of upgrading IOS without ALSO having god rights to solarwinds.

Providing admin NCM access doesnt allow the ability to do IOS upgrades.

enzo86

We are also running into the same issue on NCM. There is no way we can give 20 engineers Admin privs to run the entire platform, security compliance would eat our lunch. Without these rights though none of the admins can push firmware upgrades.

jpetkevich

What is your ideal rights level for a user to execute Firmware Upgrades?

enzo86 same question to you.

enzo86

for NCM

Engineer

This role has Administrator privileges, but cannot view the device configuration transfer status for all users.

WebUploader

This role has read and write access on network devices, but cannot change device configurations without Administrator approval.

Would be Ideal if WebUploader could process the upgraded then wait on approval if the approval engine was enabled. If not Engineer level would be fine, as long as they would not have the ability to modify other users orion accounts.

jpetkevich

Great examples, thanks for providing that!