topic Re: Role creation on NetApp Cluster mode in ONTAP Discussions

Role creation on NetApp Cluster mode

MOHAN1985 — Thu, 05 Jun 2025 05:33:03 GMT

Hi,

I was unable to find any information on role creation on NetApp Data Ontap 8.1/8.2 cluster-mode filers.

Please let me know different ways of role creation with appropriate access rights.

Can these users/roles created be used in Data Ontap API calls?

Thanks,

Mohan

MUKTA_APHALE — Fri, 11 Jul 2014 08:02:58 GMT

You can use the API - security-login-role-create

Possible access level settings are none, read-only, and all. The default setting is all.

Ruby code for this would look like:

request = NaElement.new("security-login-role-create")

request.child_add_string("role-name", new_resource.name)

request.child_add_string("vserver", new_resource.vserver)

request.child_add_string("command-directory-name", new_resource.command_directory)

request.child_add_string("access-level", new_resource.access_level) if new_resource.access_level

request.child_add_string("return-record", new_resource.return_record) if new_resource.return_record

request.child_add_string("role-query", new_resource.role_query) if new_resource.role_query

result = invoke_elem(request)

parisi — Thu, 17 Jul 2014 20:24:10 GMT

Security login roles are covered in the product documentation:

When you create users and apply roles, you can specify which application the user has access to.

Valid applications include:

::*> security login create -application

console http ontapi rsh

service-processor snmp ssh telnet

For API use, you'd probably only need ontapi and maybe http users.

You can create users/roles via CLI or via the APIs that Mukta pointed out.

Roles and user creation are under the "security login" command directory:

::*> security login

create delete domain-tunnel lock modify

password publickey role show unlock