topic Create a user limited to create/delete snapshots on ontap 8.3 in ONTAP Discussions

Create a user limited to create/delete snapshots on ontap 8.3

SorinAndruseac — Wed, 04 Jun 2025 19:49:26 GMT

Hello,

I'm trying to create a user/pass to conect to the netapp storage from powershell and create/delete snapshots using this account. Preferable to have a more restrictive set of permissions.

And also a document on svm users vs cluster users if anyone knows, besides system administration guide.

BIG THANKS for any ideea.

Re: Create a user limited to create/delete snapshots on ontap 8.3

georgevj — Tue, 26 Jul 2016 11:26:54 GMT

security login role create snapRole -cmddirname "volume snapshot" -access all -vserver <vservername>
security login role modify -role snapRole -cmddirname DEFAULT -vserver <vservername> -access none
security login create -user-or-group-name snapUser -application ontapi -authmethod password -role snapRole -vserver <vservername>

Re: Create a user limited to create/delete snapshots on ontap 8.3

SorinAndruseac — Wed, 27 Jul 2016 09:33:25 GMT

This is briliant,

However when trying to connect on the managment interface of the svm, I get this error:

Connect-NcController : Insufficient privileges: user 'snapUser' does not have read access to this resource

Re: Create a user limited to create/delete snapshots on ontap 8.3

SorinAndruseac — Fri, 29 Jul 2016 11:20:56 GMT

I had to add the following. Seems to be working.

security login role modify -role snapRole -cmddirname version -vserver <vservername> -access all

BIG THANKS for the ideea

Re: Create a user limited to create/delete snapshots on ontap 8.3

georgevj — Fri, 29 Jul 2016 11:23:28 GMT

You are welcome!

Its good to know that I did help someone today 🙂

Much Appreciated.