Global Username/Password Connection

predefined us ers in the target device group are called global users to establish an ssh connection using such an account, and to make the global user password invisible to local users, the configuration outlined below must be in place, allowing kron pam to store the global user credentials to be used for the connection in its database navigate to devices > inventory click the device group and select the show properties option click the edit button under direct credential set the username set the password when connecting to a device with a direct credentials, priority rules are applied first priority if a vault account with the same username as the global username exists, the vault password or the rotated ssh key will be used for global user authentication second priority if a vault account is not defined, the global ssh key will be used to connect to the device if these two options are not present in the device properties, the direct credential password will be used to connect to the device the direct credential password has the lowest priority if the device requests both the ssh key and password for authentication, the vault account password will be used with the highest priority, and the direct credential password will be used as the second priority