Locking down access to credentials

Question

Hey all!

I just got our instance of NCM set up and working the way it should be. Then I had a "Why didn't I do this sooner?" moment.

I did have one question/concern about the software. We login to our devices (all Cisco switches and routers at this point) through a RADIUS server using our AD credentials. On each of the nodes, I have them set to use my AD creds for deploying scripts and backing up the devices.

My concern is that anyone who logs in can deploy scripts to the devices and it shows that it comes from me. Is it possible to only allow my user in NCM to use my credentials for deploying scripts and creating scheduled tasks? Or is there a better way to handle the credentials in this scenario. I'd like each user in NCM to be able use their own credentials if possible.

Thanks!

mesverrum · Answer

There is also an option to enable User Specific credentials, so instead of changes from NCM being run under the saved creds globally they would run under whatever credential that user enters for their actions.

Set NCM user level login credentials

wluther · Answer

norearview​ I think the idea here is to create and use a specific account for your SolarWinds/NCM deployment. Then, along with using the change control/request system, you would authorize/approve changes per user. The audit trail (only in Orion/NCM) should then indicate who did what.

Again, I think this is how they intended for this to work, though we do not actively use this method.

Thank you,

-Will