topic Re: ReadOnly Permissions? in Microsoft Virtualization Discussions

ReadOnly Permissions?

ptukadmin80s — Thu, 05 Jun 2025 06:25:01 GMT

Hi,

Can someone please let me know what role(s) is required as a minimum to connect and collect information from the controllers (ReadOnly access)?

I need to grant a service-account access to schedule reports.

I currently get this error:

Connect-NaController : User DOMAIN\username does not have capability to invoke API system-get-ontapi-version.

Thanks,

Martin

Re: ReadOnly Permissions?

beam — Tue, 19 Jun 2012 20:20:33 GMT

Hi Martin,

The required capabilities to use Connect-NaController are: api-system-get-ontapi-version, api-system-get-version. You can use Get-NaHelp to see which Api is used by a given cmdlet. For example:

PS C:\Users\Administrator> Get-NaHelp Get-NaSnapshot

Name Api Category

---- --- --------

Get-NaSnapshot {snapshot-list-info} snapshot

In order to use Get-NaSnapshot, the user must have the capability api-snapshot-list-info.

-Steven

Re: ReadOnly Permissions?

ptukadmin80s — Wed, 20 Jun 2012 08:01:06 GMT

Hi Steven,

Thanks, so I guess then I need to cross reference what capabilities each cmdlet requires, create a new role and push it out to each controller?

Thanks,

Martin

Re: ReadOnly Permissions?

ptukadmin80s — Wed, 20 Jun 2012 14:41:28 GMT

Just to let you know that I also found a post that is listing the required capabilities and script:

https://communities.netapp.com/community/products_and_solutions/microsoft/powershell/blog/2011/09/29/read-only-user-for-powershell-toolkit-and-system-manager

Thanks