AutomateNetOps Academy · New-org runthrough

New organization FAQ

Stand up a Regnor™ org without a screenshare: hybrid architecture first, then Valdis™ agent, credentials, inventory, a safe first workflow, and least-privilege invites.

Free · captioned Academy companion Open Academy catalog Start in the app Foundations course
By the end you will: name cloud vs agent vs device, connect a Valdis™ agent, store credentials so the cloud never needs device passwords, register a pool, Dry Run a first workflow, and invite teammates without oversharing Org Admin.

1. Hybrid architecture

What are the three pieces I must keep straight? verified

Regnor™ cloud is the brain — browser UI, workflows, settings. It does not SSH your switches with your passwords.

Valdis™ agent is the hands — a worker inside your network that reaches devices and uses local credential storage.

Devices are your gear (or ContainerLab labs). Automation always goes cloud → agent → device.

What is Valdis™ vs Regnor™ vs Tavrin™? verified
  • Regnor™ — visual automation platform (designer, runs, marketplace, AI assist).
  • Valdis™ — on-prem agent and zero-trust credential posture.
  • Tavrin™ — compliance engine (fleet score, drift, policy checks in workflows).

Never use the retired name “NetAuto”.

Do device passwords live in AutomateNetOps cloud? verified

Product design: device secrets are held for use on on-prem agents. Workflows reference credentials by name. The cloud shows metadata and delivery status (Configured vs Not delivered), not a password dump for Super Admins.

2. Install your first Valdis™ agent

How do I connect an agent? Academy path
  1. Open the Agent Dashboard.
  2. Click Connect a Server.
  3. Give the host a clear site-style name (e.g. dc-east-lab-01).
  4. Copy the one-time install command.
  5. Run it on a host with Docker that can reach your devices.
  6. Wait until the agent is online with a recent check-in (green).

Deep dive: Academy course On-Premise Agents.

Can I test without production hardware? verified

Yes. Spin up ContainerLab virtual labs on an agent with real NOS images, then lab-test workflows before any Live run on production gear.

3. Credentials

Where do I store SSH / API / enable secrets? verified

On the Credentials page: store once (name, username, secret). Nodes pick the credential by name. Access is scoped so a secret only works where both the user and the device allow it.

Credential shows “Not delivered” — what now? verified

Fix delivery first. Confirm an online agent holds the credential (Configured). Do not debug Netmiko timeouts until delivery is green.

4. Devices & pools

How do I add my first device and pool? Academy path
  1. Open DevicesAdd Device (name, address, type, connection driver).
  2. Create a pool (e.g. lab-access-switches) and add devices.
  3. Target the pool from workflows so you are not editing IP lists forever.

Course: Inventory & Pools.

5. First workflow

What should my first workflow be? verified

Keep it boring and reversible: Netmiko or Scraplishow version → optional TextFSM parse → optional Ping → optional notification.

Designer shape: New Workflow (Start/End present) → drag device node → wire Start → node → End → credential by name → Dry Run.

Course: Workflow Designer Fundamentals.

6. Run safely

Dry Run vs Live? verified

Dry Run walks the path and changes nothing on devices. Live is real. Always read pre-flight checks before you commit. Review results under Executions.

How do I change config without leaving gear broken? verified

Start changes with a Data Backup node. Prefer the Marketplace Safe Change template: blast-radius preview, approval, apply, verify, auto-rollback on failure. Use an Approval Gate for human sign-off.

7. People & RBAC

How do I invite teammates without giving away the keys? verified

Create custom roles with a least-privilege permission matrix before mass invites. Scope Resource Access down to individual credentials when needed. Keep Org Admin for true admins only. Paper trail lives in Audit Logs.

Course: Access Control.

8. Tavrin™ compliance (after first runs)

When should we open compliance views? verified

After agent online, credentials delivered, devices pooled, and at least one successful show/backup-style workflow. Then use the Compliance Dashboard and Configuration Health for fleet score and drift.

9. Academy & help

Are Academy courses free? Is this a certification? verified

Courses are free and captioned, recorded on the real product. Academy completion is not an external certification AutomateNetOps promises — it is time-to-competence training.

Where do I learn next? verified

10. Troubleshooting cheat sheet

SymptomCheck firstThen
No agents listedInstall finished? Host up?Egress to control plane
Auth failures on runCredential Not delivered?Device AAA / legacy SSH consent
Device timeoutsAgent host reachability, ACL, VRFPing / Traceroute nodes
Dry Run OK, Live failsMutating node? Approval pending?Per-node error + rollback path
Email /support 404Known edge allowlist gap on some deploysUse working in-app support; escalate platform

11. Day-1 checklist