Log in using stored credentials

We would like to be able to log in to administer devices using the credentials stored in the device properties via remote management. 

In our usage case, we'd like to be able to give rights to our managed services team so that they can log in without having to enter a password. The idea is that we don't have to give them access to SSH/RDP credentials, and instead they would use their own credentials and two-factor authentication in order to gain access to LM, and then if they have the authorization attached to their role then they can log-in with stored credentials without ever seeing the device credentials.

The ability to assign this right to a role would allow us to to force external contractors to use a temporary password if we so choose.