- play_arrow Administration
- play_arrow Introduction
- play_arrow Organization Management
- play_arrow Site Management
- play_arrow User Management
- play_arrow Inventory Management
- play_arrow Audit Logs
- play_arrow Tags
-
- play_arrow Device Life Cycle Management
- play_arrow Introduction
- play_arrow Day-Wise Activities for Device Life Cycle Management
- play_arrow Field Technician User Interface
- play_arrow Onboarding Profiles
- play_arrow Plan Device Onboarding
- Network Implementation Plan Overview
- About the Network Implementation Plan Page
- Allocate a Device as a Resource
- Add Network Resource Pools
- Add a Network Implementation Plan
- Publish a Network Implementation Plan
- Offboard a Network Implementation Plan
- Edit a Network Implementation Plan
- Update the Network Implementation Plan and Recreate Service Instances After Upgrade
- View Network Resources
- play_arrow View Device Onboarding
- About the Onboarding Dashboard
- Move a Device to Production
- View Results of Automated Device Tests
- Identity and Location Data of a Device
- Remote Management Data and Test Results
- Hardware Data and Test Results
- Interfaces Data and Test Results
- Software Data and Test Results
- Configuration Data and Test Results
- Routing Data and Test Results
- Device Connectivity Data and Tests Results
- play_arrow Device Management
- Device Management Workflow
- Device Licenses Overview
- About the Features Tab
- About the Licenses Tab
- Manage Device Licenses
- About the Software Images Page
- Upload a Software Image
- Delete a Software Image
- About the Configuration Backups Page
- Configuration Templates Overview
- About the Configuration Templates Page
- Add a Configuration Template
- Edit and Delete a Configuration Template
- Preview a Configuration Template
- Deploy a Configuration Template to a Device
-
- play_arrow Observability
- play_arrow Introduction
- play_arrow Health Dashboard
- play_arrow Troubleshoot Devices
- play_arrow View Network Topology
- Network Topology Visualization Overview
- Network Visualization Options
- View Network Topology Details
- Network Table Overview
- About the Device Tab
- About the Link Tab
- About the Site Tab
- About the Tunnels Tab
- Dynamic Topology Workflow
- Configure a PCE Server
- Configuring PCEP on a PE Router
- Configuring Topology Acquisition Using BGP-LS
-
- play_arrow Trust and Compliance
- play_arrow Introduction
- play_arrow Manage Trust Settings and Trust Scores
- Compliance Standards Overview
- About the Compliance Benchmarks Page
- About the Compliance Tailorings Page
- Example: Create a Tailoring Document for NTP Settings
- About the Compliance Checklist Page
- Add a Checklist Template
- Add Checklist for a Device
- Import Scans and Update Rule Results in a Checklist
- Trust Plans Overview
- About the Network Score Formula Page
- Trust Score Overview
- About the Network Score Page
- About the Snapshots Page
- Add a Snapshot for a Target
- play_arrow Manage Compliance Scans
- play_arrow Manage Vulnerabilities
- play_arrow Monitor Integrity
-
- play_arrow Service Orchestration
- play_arrow Introduction
- play_arrow View Service Design Catalog
- play_arrow Manage Customers
- play_arrow Add Resources for Network Services
- play_arrow Manage Service Instances
- Service Instance Overview
- About the Service Instances Page
- View Service Instance Details
- View Passive Assurance Monitoring Data
- View EVPN Passive Assurance Monitoring Results
- View L2 Circuit Passive Assurance Monitoring Data
- View L3VPN Passive Assurance Monitoring Results
- Physical Interfaces Health Check Results
- Logical Interfaces Health Check Results
- Performance Graphs to View Passive Assurance Monitoring Data
- play_arrow Provision VPN Services
- play_arrow Monitor Service Order Execution Workflows
-
- play_arrow Active Assurance
- play_arrow Introduction
- play_arrow Test Agents
- play_arrow Tests and Monitors
- play_arrow Test Templates
-
- play_arrow Paragon Shell CLI Reference
- play_arrow Introduction
- play_arrow Operational Mode Commands
- file copy
- monitor
- request paragon backup
- request paragon cluster pods reset
- request paragon cluster upgrade
- request paragon config
- request paragon deploy
- request paragon deploy cluster
- request paragon destroy cluster
- request paragon fix-permission
- request paragon load
- request paragon repair-node
- request paragon replace-node
- request paragon restore
- request paragon running-config
- request paragon ssh
- request paragon ssh-key
- request paragon storage cleanup
- request paragon super-user password reset
- request system decrypt password
- request system reboot
- show configuration paragon cluster
- show configuration paragon cluster applications (o)
- show configuration paragon cluster common-services (o)
- show host disk usage
- show paragon backup
- show paragon certificate expiry-date certificate-type
- show paragon cluster (o)
- show paragon cluster details
- show paragon cluster namespaces
- show paragon cluster nodes
- show paragon cluster pods
- show paragon cluster pods namespace healthbot sort
- show paragon images version
- show paragon images version namespace
- show paragon pvc details
- show paragon version
- play_arrow Configuration Mode Commands
- delete paragon cluster
- load set
- set paragon cluster applications
- set paragon cluster common-services ingress
- set paragon cluster insights victoria-metrics
- set paragon cluster install
- set paragon cluster kubernetes
- set paragon cluster mail-server
- set paragon cluster nodes
- set paragon cluster ntp
- set paragon cluster papi
- set paragon monitoring
- set system login
- show paragon cluster (c)
- show paragon cluster applications (c)
- show paragon cluster common-services ingress (c)
- play_arrow Troubleshooting Commands
- Troubleshoot Using the Paragon Shell CLI Commands
- request paragon support information
- request paragon troubleshooting information
- request paragon debug
- request paragon debug get-tsdb-data
- request paragon debug insights-kafka-data
- request paragon debug kafka
- request paragon debug logs
- request paragon debug logs namespace
- request paragon debug postgres
- request paragon debug redis
- play_arrow Service Orchestration
- About the Service Orchestration cMGD CLI
- set foghorn:core org-id
- set service design default version
- set dag state failed
- show service order status
- show service order as-json
- show service order as-yaml
- show service designs
- show device dependent configuration
- show insights configuration
- show configuration foghorn:customers
- show service instance lock status
- show service instance lock token
- show service projects
- show service order history
- show airflow dags
- show airflow dag-runs
- show paragon orgs
- request service project add
- request service order sync
- request network resources load
- request service order load
- request service order place
- request service order modify
- request service order delete
- request service order submit
- request service order provision
- request service design install
- request service design uninstall
- request create graphdb
- request service order set
- request service instance lock
- request service instance unlock
-
User Activation and Login
To access Paragon Automation Web GUI, you must have an account in Paragon Automation. Your account is activated after you log into the Paragon Automation Web GUI. You can then perform activities as defined by your role.
If single sign-on (SSO) is enabled, you can access Paragon Automation through your identity provider (IdP) account. IdP authenticates your access privileges in Paragon Automation. For more information, see Single Sign-On.
The system administrator who installs Paragon Automation is usually the first user to log in by using the e-mail address and password entered while installing Paragon Automation. Once logged in, the system administrator creates an organization and is assigned the Super User role in the organization. A superuser can add or invite users to the organization.
Depending on whether SMTP or local authentication is configured, Paragon Automation sends invitations and notifications to users. See Configure SMTP Settings in Paragon Shell for information about the behavior when either or both local authentication and SMTP are enabled or disabled.
If SMTP is configured in Paragon Automation, an invitation is sent over an e-mail when the superuser invites users to an organization. A user can click the link in the e-mail invitation and complete the login tasks. Your login procedure depends on whether you are an existing user with a Paragon Automation account or a new user without a Paragon Automation account.
If SMTP is not configured in Paragon Automation, the Super User adds users to an organization and shares the Web URL of Paragon Automation and credentials (e-mail ID and temporary password) to log in, with the users. Users can then access the Web URL and log in using the credentials. Once logged in to Paragon Automation, the user is prompted to create a new password.
After the user logs in and accesses an organization, the first page that Paragon Automation displays depends on your user role. If your role is Installer, the first GUI page you view is the Onboard a device page. For users with other roles, Paragon Automation displays the Troubleshoot Devices page.
The log in procedures for different roles are as follows:
Log into Paragon Automation for the First Time After Installation
The first user to log into Paragon Automation is typically the system administrator who installs Paragon Automation. On successful installation, the system administrator gets the URL to access the Paragon Automation Web GUI from Paragon Shell. The Welcome message that appears after logging in lists the IP address and e-mail ID to access the Paragon Automation Web GUI.
To log in as the first user:
Log in as a New User Without an Invite (when SMTP is not Configured)
When SMTP is not configured in Paragon Automation, the superuser who creates your account in an organization manually informs you about the Web URL and the credentials (e-mail address and temporary password) to log into the Paragon Automation Web GUI.
To log in as a new user without an invite:
Log in as a New User for the First Time Without an Invite (when SMTP is Configured)
To access Paragon Automation Web GUI as a first-time user without an invite, you need the Web URL of Paragon Automation. To access the Web GUI, you must create an account in Paragon Automation. You will then receive a verification e-mail to validate your account.
To log in as the first user without an invite:
Log in as a New User With an Invite (when SMTP is Configured)
If SMTP is configured in Paragon Automation, you receive an e-mail invitation when the superuser creates an account for you to access an organization. You are also notified when your user account is modified.
To log in as a new user with an invite:
Access a New Organization (when SMTP is Configured)
To accept an invite to a new organization as an existing user already having an account in Paragon Automation, click the organization-name in the e-mail body. The Troubleshoot Devices (Observability > Health > Troubleshoot Devices) page of the organization opens in a browser.
The tasks you can perform in this organization depends on your user role. See Predefined User Roles Overview for more information.
