Skip to tutorial content
Rate module Not yet rated

Application, Database, VMware and Platform Credentials

4 min read
On this page

In this lesson, you will learn:

  • Which targets need their own credentials
  • SNWR’s vCenter and PostgreSQL credentials
  • How to keep them read-only

🔁 Quick look back: Last time: SNMP v1, v2c and v3 Credentials. You learned how SNMP versions differ and why SNWR uses SNMPv3.

1 The Problem: A Host Login Can’t See Inside the Database

Discovery can log in to snwr-db-01 and see PostgreSQL running. But:

  • It can’t list databases without a database login.
  • vCenter needs its own login to list VMs.

🎯 The problem: A host login can’t see inside the database or vCenter.

👉 The fix: Add read-only credentials for platforms whose patterns need them.

Table of platform credentials.
Figure 1. SNWR’s platform credentials.

2 Which targets need their own credentials

  • Virtualization platforms, such as vCenter.
  • Some databases, for deeper details.
  • Cloud accounts.
  • Some applications with their own admin API.

💡 Good to know: Check the pattern for each application. It shows whether it needs a separate credential.

3 Keep them read-only

Each platform account should only read. A vCenter account that can power off VMs is a big risk.

⭐ Remember: Add platform credentials to the privilege matrix and credential register, like any other.

4 Project Clear View: How We Implemented It

📍 Situation: Design listed vCenter and PostgreSQL credentials.

🧭 Decision: Create both as read-only and test them.

🛠️ Steps we took:

  1. Priya created svc-snow-vc with a read-only vCenter role.
  2. Priya created snow_ro in PostgreSQL with read-only rights.
  3. Created both credentials on snwrtest.
  4. Tested vCenter and PostgreSQL discovery.

✅ What we verified:

  • vCenter returned hosts and VMs.
  • PostgreSQL returned database details.

📁 Evidence: Both credentials in the credential register.

5 Quick recap

  • Some patterns need credentials beyond a host login.
  • vCenter, databases and cloud accounts often do.
  • Keep them read-only.
  • Record them like any other credential.

6 Check yourself

Think of your answer first. Then tap to check.

1 Why does PostgreSQL need its own credential? Show answer

A host login can see it running, but can’t read inside the database.

2 What rights does svc-snow-vc have? Show answer

A read-only vCenter role.

3 Where do you check if an app needs its own credential? Show answer

In the app’s pattern.

Nice work! SNWR’s platform credentials are ready. 🎉
Next up: Credential Order and Credential Affinity

Was this lesson helpful?

Have a question or doubt?

Ask here and get help from instructors and fellow learners.

0 / 300

Only logged-in learners can post.