Subscribe

Capabilies needed for a DOT user configured in OnCommand

Hi,

My customer doesn't want to use root user for connecting from Operation Manager to controlers.

He prefers to use a specific user with capability set in a role.

I made some test, and find this capabilities as requested (errors generated by my user set in dfm) :

login-http-admin,api-snapshot-get-schedule,api-volume-list-info,api-perf-object-get-instances,api-system-cli,api-ipspace-list-info,api-fcp-adapter-list-info,api-perf-object-list-info,api-vfiler-get-status,api-volume-move-status,api-volume-get-language,api-aggr-list-info,api-volume-get-root-name,api-perf-object-counter-list-info,api-lun-config-check-cfmode-info,security-priv-advanced,login-ssh,api-perf-object-instance-list-info

Is there any way to get a complete list of capabilities needed?

Regards

Hervé

Capabilies needed for a DOT user configured in OnCommand

Is there any one particular capability that you want to prevent ? Also what are the functionality of Operation manager are you planning to use ?Like

is it only Operation Manager ? or Performance Advisor or Protection Manager or Provisioning Manager ?

Regards

adai

Capabilies needed for a DOT user configured in OnCommand

Hi Hervé,

the following link gets you to a KB article for creating a read-only user in DFM/OM.

https://kb.netapp.com/support/index?page=content&id=1011412

Unfortunately it ends what's required for OPNTAP 7.3.2, but it should give you an idea on what's needed.

After having created such user, observe the ONTAP messages to see if any errors are logged regarding missing capabilities.

regards, Niels

Capabilies needed for a DOT user configured in OnCommand

Thnaks!!

That's what i'm looking for!

Great!