NCM and Permissions

stuartd

Sadly we have some inveterate fiddlers when it comes to things they don't understand, so in our usage of Solarwinds we have taken the approch that most things are restricted into a rad-only mode.

However, one area where we think it would be beneficial to allow access is for users to be able to run scripts that have been pre-created.

So, to that end, is there anyway we can set the permissions that would allow this whilst minimising their ability to have almost full write access? I note that we have to set the NCM Role = Engineer to allow them to run scripts but this allows too much freedom for our fiddlers.

shuth

As far as I know, there is no way to limit users to only being able to run predefined/saved scripts.

If you enable the Approval system and assign those users the Uploader role, they can request configuration changes but you will need an Engineer or Administrator to approve it.

https://documentation.solarwinds.com/en/Success_Center/ncm/Content/NCM-Approving-Device-Configuration-Changes.htm

Alternatively, you can use user-level logins rather than device-level, and your users' access will be determined by TACACS/RADIUS/whatever AAA method you use on your network devices.

https://documentation.solarwinds.com/en/Success_Center/ncm/Content/NCM-Setting-User-Level-Login-Credentials.htm