1 of 1 people found this helpful
Read only is fine, but in cisco land running a restricted credential tends to only show you the parts of the configs that you are allowed to edit, so there is some cisco specific manipulations you have to do to make a read only account that can actually show a complete config
See this thread on their forum for discussion on different ways to make it happen.
I will say SSH to login and SNMP to identify the elemen type if you use auto detect profile
Ask the 3rd party to give you a read only account that allows you to show the running config. And get SNMP access as well so you can fully monitor it too.