Some implementations of the disclosure are directed to receiving over a distributed ledger network, at an edge network device, a network configuration update transaction, the network configuration update transaction including an update to a configuration of a network device group including a plurality of network devices, where the edge network device is communicatively coupled to one or more of the plurality of network devices; validating, at the edge network device, that the transaction was sent by a cloud-based networking management platform that manages configurations of network devices that are members of the network device group; and after validating the transaction, updating at the edge network device a local copy of a distributed ledger associated with the distributed ledger network to include the update to the network device group configuration.