Permissions to change Credentials only?

Hello Andreas,

This scenario isn't possible in DVLS and RDM. There is no method available to grant edit permission on a specific parameter.

I will move this thread in the feature request section. I have asked an engineer to have a look on your request.

Best regards,

Hello Andreas,

Could you tell us more on your flow and why a such feature would be useful for you ? It is already possible to link a credential with a session and you could give the edit only on the credential. I guess it is not what you want, but I would like to understand more what is your goal. Do you want to allow your user to edit only the linked entry or you would like to let him change the credentials to custom and set a username/password into the entry ?

Best regards,

Hi Fracois

All Customer Servers are inventoried automaticaly in a central Database. Our System Engineers edit the Servers in the Database and set Options like "Show in RDM", "Display Name" or IP/Port/Protocol and so on.
After that, the Servers will be synced into DVLS/RDM.
Every SSH-VPN Entry and Location Folder needs a single configuration to link the specific Credentials Object.
Currently i setup the Permissions, that every System Engineer is able to completely edit all SSH-VPN Entries, but not the Folder, because i dont want that Users are setting too much special Settings to them; all folders should be uniform.
So for now, an Administrator needs to setup every customer vault by hand, after a Systen Engineer has onboarded or changed a Customer.

I hope you have a better insight how we work with DVLS/RDM!

Best Regards,
Andreas

Hello Andreas,

If I understand correctly, your DVLS/RDM configuration is completely built from your central Database, except for the credentials ? It means that somebody has to go in DVLS/RDM to create/link the right creds for every SSH-VPN and also the Location Folder, am I right ? To avoid changes on the folder, you don't give edit permission, but an administrator has to go in DVLS/RDM for that. But your System Engineer can do it for the SSH-VPN entries.

What you would like is to give access to your System Engineer to set/linked a credential on the Location Folder, but you don't want to give the full edit permission, is that correct ? And I assume you would like to give a similar permission for the SSH-VPN. You give them the full edit permission for now because it is the only way for now, but you don't want to do it for folder since you want to keep uniformity, correct ?

Let me know if my understanding is correct

Best regards,

Hi Francois

Yes, correct 😊👍

Best Regards,
Andreas

Hello Andreas,

Thank you for confirmation, I understand how you work :) We will keep that in our backlog and post back here when we have solution.

Best regards,