admin vs discovery_admin

[VPN]

Hi All,

We have discovery schedule  configured by admin, So need to provide access to different user to run and configure discovery schedule going forward so discovery_admin role is ti enough or we need to provide admin access.

If admin access, any specific reason like troubleshoot etc

If discovery admin, what all he can perform.

Thanks & regards,

vikas

[robertgeen]

Hello,

Discovery Admin should be all you need if they are just configuring discovery schedules. Discovery Admin will allow them all access to the discovery module and all the configuration needed in regards to the mid server setup. 

The only thing someone might need admin for would be if they were doing some deep troubleshooting and needed access to the system logs but that could be customized to be given without admin access.

[Narayan2]

The discovery_admin role is sufficient for discovery scheduling and configuration, This role grants access to the tables in the Discovery application.

Admin role is super role it is not recommended to use admin role for this purpose. If you need to troubleshoot with debug option then you can impersonate admin user and debug the discovery.


Hope above answers you query.

[vinothkumar]

As suggested by others provide discovery admin role alone and admin role have more privelages and it is not advisable to provide these role, only with aspect to discovery. Coming to troubleshooting with respect to discovery, discover_admin user itself can view the discovery logs and check the ecc queue in the discovery schedule.