The following security is applied when managing devices:
- For Snapshot span actions, BMC Network Automation always uses the device's assigned device security profile (DSP).
- For Telnet/SSH client sessions, the user supplies logon credentials as prompted by the device.
- For all other span actions (for example, Deploy to Active, Deploy OS Image), a system parameter under Admin > System Parameters defines which logon credentials to use. To force the user to supply TACACS+/RADIUS credentials, select Enter at Job Creation.
The following figure shows Device Security Profile being selected for security:
Editing user authentication parameters
You can edit user authentication system parameters, which are configurable by navigating to Admin > System Admin > System Parameters. For details, see Security section (local mode user authentication) and Security section (external mode user authentication).