Shutdown Script with RBAC

DAMNX6789 — Wed, 04 Jun 2025 22:33:32 GMT

Hi folks,

I'm trying to do an automated shutdown using powershell toolkit, involving Invoke-NCSsh (Clustered DataONTAP)

Problem is, as long as the user (in the script) has the role set DEFAULT = ALL this script works.

connect first controller

system node halt -node Cluster-01 -inhibit-takeover true -skip-lif-migration-before-shutdown true

connect second controller

system node halt -node Cluster-02 -inhibit-takeover true -skip-lif-migration-before-shutdown true

prompts "Error not authorized for that command"

As soon as I change the role of the user to DEFAULT=read-only and grant only access to "system" = all, this script won't work.

A normal SSH session via putty and the same user lets me halt the controllers manually.

Am I missing something in the RBAC rights management?

Thanks,

Michael

topic Shutdown Script with RBAC in Microsoft Virtualization Discussions