Rotate Connector Credentials
A new feature added in our June 2023 release allows you to manage integration security by rotating connector machine credentials. Using a command line interface, you can create new machine users and also change passwords. The available commands include:
- add: specify a name, defaults to “machine-user-${account-id}” and password
- set-password: specify the user ID and a new password
IMPORTANT: The password, once set, cannot be retrieved. Ensure you save it somewhere safe, like a password manager.
You use the Unify command line interface (CLI) tool to manage connector (machine) user credentials.
Install the CLI tool using the instructions found here. Once installed, you can view the user list, add a new machine user, and set a machine user’s password.
View Unify User List
View the list of Unify users including their ID, name, email, created timestamp, status, and role.
Note: email doesn’t apply to machine users
COMMAND: unify user org-list [OPTIONS] | |||
|---|---|---|---|
-o, --org | Integer | View users assigned to this org | Required |
--remote | Text | Nickname for the remote cluster to connect to | Required |
Add Unify Machine User
Add a new machine user and set the password.
COMMAND: unify user machine add [OPTIONS] | |||
|---|---|---|---|
-o, --org | Integer | Assign the user to this org | Required |
--remote | Text | Nickname for the remote cluster to connect to | Required |
--name | Text | Machine user name, defaults to “machine-user-${account-id}” | Optional |
--account-id | Text | Machine user ID, integer format | Optional - if not specified, one will be generated |
--password | Text | Machine user password | Optional - if not specified, the tool will generate a long random password |
--role | Text | User role for the given org. Either “Admin” or “Contributor”. Defaults to “Contributor” if not specified. | Optional - if not specified, the default is used. |
--help | Shows this message | ||
IMPORTANT: The password, once set, cannot be retrieved. Ensure you save it somewhere safe, like a password manager.
Set Unify Machine User Password
Update the password for a machine user.
COMMAND: unify user machine set-password [OPTIONS] | |||
|---|---|---|---|
--remote | Text | Required | |
--user | Text | Machine user name, defaults to “machine- user-${account-id}” | Required |
--password | Text | Machine user password | Required |
--help | Shows this message | ||
