I recently used NCM to search my Nexus 7k switches to see which were missing my most up-to-date local admin account. I wanted NCM to run a script to add the local admin account to all of the 7Ks where it was missing, but a handful of switches returned an error that said "cannot make changes for other user". Google reported this as known Cisco bug CSCtl56471, but I didn't have the option to upgrade my NX-OS so I kept looking for other solutions.
It turns out that the cause was not this bug after all. My NCM uses a local user account to inspect all of my devices, an account that is supposed to be of type network-admin or vdc-admin. However in a very small number of cases, someone had created this account of type network-operator. This went unnoticed until now because my NCM scripts were always running show commands. But now that I wanted to run config commands, my script failed because the service account did not have read-write privileges.
I know that the 7Ks are going away but I wanted to share this so that the next person who stumbles across this might have a faster time to resolution. Happy trouble shooting!
