topic Dynamic Authorization in ONTAP Discussions

Dynamic Authorization

TMADOCTHOMAS — Tue, 11 Feb 2025 21:15:58 GMT

I've been reading up on the new Dynamic Authorization feature in OnTAP 9.15.1 since we just upgraded to that version on one of our clusters. I'm interested if anyone has tried implement this feature and if it was a positive experience. In particular, I'm curious if there's a 'break glass' way to resolve an issue where multiple admins get locked out at the same time, and/or if the main admin account is exempt.

https://docs.netapp.com/us-en/ontap/authentication/dynamic-authorization-overview.html

Re: Dynamic Authorization

pandeyji — Wed, 02 Apr 2025 13:42:07 GMT

Administrators can disable Dynamic Authorization if necessary "Enable or disable dynamic authorization in ONTAP"

The main admin account can be configured to have a higher trust score or be exempt from certain restrictions. This ensures that the primary admin can always access the system even if other accounts are locked out due to suspicious activity

Re: Dynamic Authorization

TMADOCTHOMAS — Wed, 02 Apr 2025 14:16:37 GMT

Very good to know! That pretty much answers my question, thank you @pandeyji !