Subscribe

QUESTION - The minimum RBAC configuration of capabilities for OnCmd / Perf Advisor to use

Hello

I am working on a customer deployment for OnCommand UM v 5.1 with Perform Advisor

Right now we are using the filer's ROOT account to run DFM initially but we need to use a user that can be used with DFM for all its monitoring functions but not be allowed to send commands to the filer through the "Run a Command" feature to say ... "halt" a filer.

Based on this article - https://kb.netapp.com/support/index?page=content&id=1011412&locale=en_US we tried the 8.0.3 ( we are on 8.1.2 ) and the list of capabilities there seems not to be enough ( Perf Advisor was RED - unable to collect, even though DFM HOST DIAG was 100% pass ).  Once we used root, we can collect performance data.

Is there a well known set of capabilities DFM needs or is a pre-defined role good enough, like Power User?

We are looking at the roles more carefully but I wanted to start a conversation here.

Thanks, Emanuel

Re: QUESTION - The minimum RBAC configuration of capabilities for OnCmd / Perf Advisor to use

You are not only one whit this problem. Can NetApp support anwser this question?