topic Re: Restrict "Domain Admins" in Operations Manager in Active IQ Unified Manager Discussions

Restrict "Domain Admins" in Operations Manager

pius_gaehwiler — Thu, 05 Jun 2025 07:21:08 GMT

Hi,

our Netapp filers are integrated in our AD domain and also DFM is installed on a MemberServer of this Domain. With this setup the members of Domain Admins has full access to the Operations Manager (DFM) regardless of the RBAC settings 😞 RBAC is working fine for not Domain Admins, Windows domain admins are not netapp experts, and therewith they shouldn't have full access.

Is there any solution to restict Domain Admins?

Cheers,

Pius

Restrict "Domain Admins" in Operations Manager

eduard_abrahamyan — Wed, 12 Oct 2011 10:59:20 GMT

We have same issue. Due the DFM installed on a server whish is member of a domain the all domain users have full access rights to DFM.

Need to restrict acess.

There is everyone without roles, how can we remove the everyone account from DFM?

thanks.

Eduard Abrahamyan

Re: Restrict "Domain Admins" in Operations Manager

eduard_abrahamyan — Mon, 28 Nov 2011 14:18:57 GMT

by default Windows Administrators group members are super-users in DFM.

Is it possible to change it to other group or restrict the rights level for buildin\Administrators group.

Re: Restrict "Domain Admins" in Operations Manager

DAMIANGILL — Mon, 10 Mar 2014 20:46:17 GMT

I have tried to get this looked at, contacting different partner resources but no joy

My post was made here https://communities.netapp.com/thread/33728

Would be great to get this changed so rather than the local administrators group being used (which has Domain Admins nested within it) you could simply just pick a specific AD group.

Come on NetApp!!