How to globally set user specific settings against team sessions
Hey there,
New to this product and forums. We're a small team 10-12 (but may deploy to over 40) who utilize a shared SQL DB for RDM. We each use a private vault for personal credentials. Currently I'm transferring all sessions over from a different app and setting each individual RDP up with my user specific settings. Once I complete my work, I'll be going to each team member and getting them connected to my DB. When they connect, they need to be able to globally set creds roughly as follows.
Datacenter 1 (Cred 1)
> Rig 1 (Inherited)
> RDP Webserver 1 (Inherited Credentials and Custom RDP Gateway Credentials).
Datacenter 2 (Cred 2)
> Rig 2 (Inherited)
> RDP Webserver 1 (Inherited Credentials and Custom RDP Gateway Credentials).
Can anyone provide some advise on how to globally set credentials on folders and RDP Sessions on a per user basis using the private vault?
Any assistance is greatly appreciated.
Thanks,
Rob
Hello,
You seem to have set things up perfectly, you will have to set user specific settings on each Datacenter folder, are you looking for a way to do this in bulk? I'm afraid there's not.
Maybe I misunderstood your concern though...
Maurice
Hello Maurice,
I think you have the idea. I was hoping to be able to set everything up and then tell my team to connect to my DB, create their own credentials in their private vaults, then set Network 1 creds on the Network 1 top folder and a separate RDP Gateway credential (specific to user) on the gateway for all connections. Where the network credential would change, the gateway would not.
If that can't be done in bulk, is there a method to setup a template and assign a default gateway credential from a users private vault? My thoughts are this. I currently have a template setup for MS RDP Sessions with the following:
Credentials (Inherited from top level folder)
Connection - RDP Gateway URL
Can I also setup the template to use gateway credentials? If I had all users create a set of creds and name them "Gateway creds" for example, could I then tell the template to utilize the credential vaults "Gateway creds" credentials? At the very least is it possible to set gateway credentials at the folder level so everything below that can be set to inherited? Thank you again!
no, you cannot link to the private vault in a template.
Here's an alternative
You can see that I've created credentials entries, I have set the credentials for the session in the Cred1 and Cred2 entries. The RDP sessions use the proper one. The Gateway credentials are at the root, because I understood that they rarely change. The RDP sessions have that set as the credential to use for the gateway.
Instead of using the private vault, I have used the "User specific settings" to override all of these credentials (which are blank in fact). You can see I've added the "specific Settings" column so you can see clearly that they are overridden.
So each of you users, would have to go set his own creds in the "User specific settings" of all the credentials.
If I think of another solution I will update this, but it will be tomorrow.
Best regards,
Maurice
creds2.png
I think I see what you're saying. So at the root I would "right click > Add > Add credential entry" and enter my "gateway credentials." Then I would do the same at the Datacenter 1 and 2 folders. I was under the impression that these credentials would be global, so if 2 users logged in both could see the username/passwords? Is that incorrect? Ultimately everyone of us has separate credentials for everything, no credentials are shared.
The ones in the "public" area of the database contain nothing in fact. You just create the entry, give it a name and save it.
Using the "User specific settings" allows each user to override the content of the blank entries with something unique to them. But since you would have specified in the RDP sessions to use the credential entries, and each user has overridden them, it will result in everyone using their own credentials without having to touch the RDP entries.
Maurice