Abstract: Mechanisms for controlling access to credentials are disclosed. A computing device receives, at a first time, a request associated with a user to initiate a plurality of actions against a computing resource of a plurality of computing resources, the request including a credential identifier that identifies a credential. A memory is accessed, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the computing resource. The computing device communicates the request and the authentication information to an orchestration engine for execution of the plurality of actions against the computing resource.

Abstract: Mechanisms for controlling access to credentials are disclosed. A computing device receives, at a first time, a request associated with a user to initiate a plurality of actions against a computing resource of a plurality of computing resources, the request including a credential identifier that identifies a credential. A memory is accessed, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the computing resource. The computing device communicates the request and the authentication information to an orchestration engine for execution of the plurality of actions against the computing resource.

Abstract: Mechanisms for controlling access to credentials are disclosed. A computing device receives, at a first time, a request associated with a user to initiate a plurality of actions against a computing resource of a plurality of computing resources, the request including a credential identifier that identifies a credential. A memory is accessed, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the computing resource. The computing device communicates the request and the authentication information to an orchestration engine for execution of the plurality of actions against the computing resource.

Abstract: Mechanisms for controlling access to a computing resource are disclosed. A request to initiate an action against a computing resource of a plurality of computing resources is received from a user. A plurality of permission definitions that identify a plurality of corresponding permissions that grant access to the plurality of computing resources is accessed. Based on a set of permissions comprising at least one permission associated with the user and at least one permission associated with a team of which the user is a member, it is determined that at least one permission in the set of permissions grants the user access to the computing resource. The request to initiate the action against the computing resource is processed.

Abstract: Embodiments relate to systems and methods for integrated console management in networks populated by a diverse set of console types. A set of managed machines, such as personal computers or other clients, servers, hosts, and/or other machines, can be managed by a network management platform. Different machines populating the managed network can be accessed or controlled by different types of network management consoles, or client interfaces for monitoring and controlling different sets of machines. The network management platform or other node can maintain a console management engine which interacts with the various console types connected or assigned to underlying target machines. The console management engine can maintain a console translation table which invokes particular interfaces, data formats, ports, and/or other parameters of specific console packages used for underlying sets of machines. The console management engine can thereby present a unified interface to systems administrators or other users.

Abstract: Embodiments relate to systems and methods for network command delegation using auto-discovered pathways. A network management server can generate configuration or other commands to transmit to a set of supervisory hosts, which in turn relay the commands to an underlying set of hosts and/or targets. A network map can be maintained specifying pathway(s) to the supervisory hosts and/or underlying hosts and/or targets for delivery of the commands. The pathway(s) can be automatically generated using a discovery tool which probes connections to the supervisory host(s) and/or underlying hosts/targets, and records that information to a network map. The most efficient pathways on a total-hop, transit time or other basis can be identified. A systems administrator at the network management server can issue compact commands that are automatically disseminated to destination hosts/targets over large-scale and geographically diverse networks, without manually specifying pathways.

Abstract: Embodiments relate to systems and methods for integrated console management in networks populated by a diverse set of console types. A set of managed machines, such as personal computers or other clients, servers, hosts, and/or other machines, can be managed by a network management platform. Different machines populating the managed network can be accessed or controlled by different types of network management consoles, or client interfaces for monitoring and controlling different sets of machines. The network management platform or other node can maintain a console management engine which interacts with the various console types connected or assigned to underlying target machines. The console management engine can maintain a console translation table which invokes particular interfaces, data formats, ports, and/or other parameters of specific console packages used for underlying sets of machines. The console management engine can thereby present a unified interface to systems administrators or other users.

Abstract: Embodiments relate to systems and methods for network command delegation using auto-discovered pathways. A network management server can generate configuration or other commands to transmit to a set of supervisory hosts, which in turn relay the commands to an underlying set of hosts and/or targets. A network map can be maintained specifying pathway(s) to the supervisory hosts and/or underlying hosts and/or targets for delivery of the commands. The pathway(s) can be automatically generated using a discovery tool which probes connections to the supervisory host(s) and/or underlying hosts/targets, and records that information to a network map. The most efficient pathways on a total-hop, transit time or other basis can be identified. A systems administrator at the network management server can issue compact commands that are automatically disseminated to destination hosts/targets over large-scale and geographically diverse networks, without manually specifying pathways.