Arista supports users with different access levels. I need to know what the minimum privilege level and role is to support all gets & sets that the DataMiner Arista connector provides.
Hi Thomas,
In short, DataMiner needs a user account on the arista system which has access to the eAPI and the community strings for the SNMP interface.
As a minimum, the user account should have privileged exec rights, but preferably also configure rights.
In reality, the situation can be more complex:
The Arista systems allow the network administrator to define more specific access rules by means of the role command.
Using this, the access rights for a role can be defined up to the command level.
In that case, the polling manager in the Arista Manager protocol (under the ‘configure polling’ element page) can be used to tweak which commands can be used by DataMiner, in line with the rights of the role.
It’s important to note that restricting the rights of the user account, will limit the information DataMiner can collect and the actions you can perform through DataMiner on the switch.