ONTAP Discussions

Permissions on snapshots (previous versions)

bobby_gillette
5,679 Views

Just curious if there's any way to restrict permissions on snapshots or do they have to keep the same permissions as live data...

1 ACCEPTED SOLUTION

martin_fisher
5,679 Views

Hi,

Snapshots are a point in time copy of the data, so the permissions set on the data, eg CIFS Share, or SQL DB's (SQL Permissions) within a LUN, at the time the snapshot is taken, are same as the live data (if these have not been changed). if the permissions were changed between snapshots, the snapshots would reflect this.

EG. if you have a CIFS share with my documents folders, for 10 users, and you deny all ACL permissions via windows for 1 user and take several snapshots of the volume, the snaps taken will inherit this permission until its changed or corrected (or left as is!).

Hope this helps

Thanks

View solution in original post

3 REPLIES 3

scottgelb
5,679 Views

They keep the permissions at the time of the snapshot and are readonly so can't be changed.  You can turn off presentation of ~snapshot or .snapshot though to the users.

martin_fisher
5,680 Views

Hi,

Snapshots are a point in time copy of the data, so the permissions set on the data, eg CIFS Share, or SQL DB's (SQL Permissions) within a LUN, at the time the snapshot is taken, are same as the live data (if these have not been changed). if the permissions were changed between snapshots, the snapshots would reflect this.

EG. if you have a CIFS share with my documents folders, for 10 users, and you deny all ACL permissions via windows for 1 user and take several snapshots of the volume, the snaps taken will inherit this permission until its changed or corrected (or left as is!).

Hope this helps

Thanks

bobby_gillette
5,679 Views

Good information guys, thanks!

Public