6 Replies Latest reply on Mar 29, 2017 11:22 AM by jdchaiken

Config change templates, NCM User permission

helgims Oct 18, 2016 8:43 AM

I am building a few config change templates but I do not want all user to have access to all the templates, it seems that the users have access to run all the scripts that I have configured or imported.

For example I would like to allow the service desk to start some debugging on devices but not change the enable passwords on all the routers.

Help would be greatly appreciated!

-Helgi Már

Re: Config change templates, NCM User permission

jeff.stewart Oct 18, 2016 2:46 PM (in response to helgims)

Not possible today within the product, but we will log this as a feature request. Just curious, but what kind of debug would you like to run against the devices? Are you wanting to give the users the ability to issue some show commmands, like 'show tech' for example?
Like (1)

Actions
- Re: Config change templates, NCM User permission
  
  helgims Oct 19, 2016 3:48 AM (in response to jeff.stewart)
  
  The first case is to allow the support desk to enable netflow, the change approval would slow down the process and if netflow is done incorrectly it wont brake anything, since I have done it in a way that they only need to pick the interfaces.
  The feature request could be allowing "pre-approved" requests.
  
  Like (0)
  
  Actions
  - Re: Config change templates, NCM User permission
    
    jeff.stewart Oct 19, 2016 8:50 AM (in response to helgims)
    
    Thank you for the additional feedback. Question as I'm the PM for our Netflow product too. Do you use SolarWinds NTA or another flow solution? How often do you configure devices to send netflow data?
    
    Like (0)
    
    Actions
    - Re: Config change templates, NCM User permission
      
      helgims Oct 19, 2016 10:37 AM (in response to jeff.stewart)
      
      No problem at all!
      We are an MSP using Solarwinds NTA and we are monitoring about 1.100 devices for small buisnessess on this Solarwinds deployment, we do not need all of those devices in Netflow all of the time, even though some of them are.
      What the support desk would do is add a device to netflow monitoring for a few days or weeks to analyze both the current usage of the customer both for debugging and for upsell opportunities, we have yet to find a way to automate the removal of the Netflow config
      
      I estimate that we currently add from 10-20 devices a week for this purpose, I assume that this number would increase if the support desk has easier access to do this and that would help us in providing better service.
      
      -Helgi Már
      
      Like (0)
      
      Actions
      - Re: Config change templates, NCM User permission
        
        jeff.stewart Oct 19, 2016 10:55 AM (in response to helgims)
        
        Awesome. Thank you for the additional information---extremely helpful.
        
        Like (1)
        
        Actions
Re: Config change templates, NCM User permission

jdchaiken Mar 29, 2017 11:22 AM (in response to helgims)

This would be a really helpful feature. We would like it as well. I think adding a view limitation by "Tag" would probably work for us.

We have a set of "Approved" scripts for our helpdesk to run against our devices (bounce a port, etc.)
Like (0)

Actions

Go to original post