Why are Admin rights needed for Discovery Credentials?

[John Gilaspy]

I have a client that is pushing back on granting the Discovery account administrative rights on certain devices. Can anyone speak to why admin rights are needed, versus a monitor or read-only rights?

[VivekSattanatha]

Hey,

We also encountered the same when we discovered our SAN. Our storage didn't give the admin access then we gave our Servicenow CIM probes and we tested with few Dev Storage servers. Slowly they accepted to give Prod credential also. you can also do the same way.

Regards,

Vivek

[bhanupratap2203]

We do not need full write on a windows machine, but Full 'Read & execute' Access and 'Write' access only on $admin share. Regarding admin share both read/write access would be required as some probes run commands and redirect the output to the admin share which is then read by Discovery. This temporary file then get deleted by one of discovery probe which runs on target machine.

[HugoFirst]

We have the same issue and I'd like to propose a way around it, but it violates the "agentless/zero footprint" goal of Discovery.

Write a small program that the admins can run periodically on each device that records the information into a file which is stored at a known location.

Then develop a custom probe/sensor to check for that file, parse it, and update the CI record.    

That way, admin/root access remains with the admins and Discovery gets the information you need from the file.

[Vivek13]

Hi I need to create a change request with two schedules:

1. Thursday morning 8am to Tuesday morning 8am
2. Tuesday morning 8am to Thurshday morning 8am

Here for example if the user is selecting the start date as 13/08/2019(Tuesday) 9:00 am so it will fall under the 2nd schedule, now the user should be able to select the end date After 20/08/2019 8:00 am, that is the user must be able to select the end date by leaving the inbetween interval which is (15/08/2019 to 20/08/2019 8:00 am). If the user selects an end date from inbetween interval it should through an error and clear off the end date field.

Please help me with this.