VSC 5, ONTAP 8.2.1, RBAC-UC -> missing capabilities

Sebastian_Goetze — Thu, 05 Jun 2025 05:31:29 GMT

Testing version RBAC-UC 2.7.5176.32418 (just checked, it's still the newest available one) on VSC 5, I get loads of "missing capabilities"

(VSCadmin created with "All" capabilities for VSC5, also see at the end of the post for the list of roles/capabilities).

I also wonder, why VSC is trying to do CIFS stuff...?? Or is it just trying to find out what it's capabilities are by trial & error?

(at line breaks characters got lost during cut-n-paste, please disregard these 'spelling errors')

Sun Jul 27 04:00:54 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this controller to

be connected to an ESX host managed by vCenter or manually entered.

Sun Jul 27 04:00:55 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) VmDiscovery: vc.netapp.local[99393FE9-55D6-4F4-B056-

85CE97441FC5] (Total VMs=2):debian6Guest=1,winNetEnterpriseGuest=1

Sun Jul 27 04:00:57 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) HostDiscovery: vc.netapp.local[99393FE9-55D6-F24-B056-

85CE97441FC5] (Total Hosts=2):5.5.0=2

Sun Jul 27 04:00:59 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) PluginVersions: vc.netapp.local[99393FE9-55D64F24-B056-

85CE97441FC5] version=5.5.0 OS=Windows Server 2008 R2:cim-

ui=5.5,com.vmware.vim.eam=5.5,com.vmware.vim.inventoryservice=5.5,com.vmware.vim.ls=5.5,cm.vmware.vim.sms=5.5,com.vmware.vim.sps=5.0

Sun Jul 27 04:01:01 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) PluginVersions: vc.netapp.local

(5.5.0):com.vmare.vim.stats.report=1.0.0,com.vmware.vim.vsm=5.5,health-

ui=5.5,hostdiag=1.0,VirtualCenter=1.0,com.netapp.nvpf=5.0,com.netapp.nvpf.webclient=2014.04.01.11473

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-check-spare-low'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-create'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-destroy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-filer-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-root-name'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-mediascrub-list-inf'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-mirror'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-modify-raid-type'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-offline'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-online'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-options-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-restrict'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-suspend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-set-option'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-space-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-split'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-suspend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-commit'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-reject'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-review'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-force-takeover'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-giveback'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-hwassist-stats'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-hwassist-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-negotiated-failover-dsable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-negotiated-failover-satus'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-service-disable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-service-enable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-takeover'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cg-commit'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cg-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-branchcache-hash-stt'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-branchcache-set-key

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-homedir-paths-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-list-config'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-nbalias-names-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-nbalias-names-set'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-session-list-iter-nxt'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-create-group-ile'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-create-passwdfile'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-site-list-ite-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-verify-passwdand-group'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-ace-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-ace-set'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-acl-list-iterend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-acl-list-iterstart'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-change'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-nex'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-stat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-start-on-target'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-stop-on-target'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-clock-get-timezone'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-clock-set-clock'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-abort'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-modify'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-config-modiy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-destroy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-status-get-ter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-dfm-set-server-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-definitin-get-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-modify'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-config-get-ite'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-policy-definiton-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-et'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-et-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subsystem-confg-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subsystem-confg-get-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-maint-list'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-sanown-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-sanown-remove-ownerhip'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-swap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-unswap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fc-config-adapter-disabl'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fc-config-list-iter-next

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-config-down'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-nameserver-lst-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-reset-stats'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-set-partner'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-topology-lis-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-zone-list-itr-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-node-set-name'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-service-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcport-send-lip'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-get-snaplock-retenton-time-list-info-max'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-inode-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-read-symlink'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-rename-directory'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-set-space-reservatin-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-usage-result-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-flash-get-thresholds'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-extensions'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-get-policy-optios'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-operations-list-et'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ic-config-show'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ic-reset-nic-auto-on'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-igroup-lookup-lun'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-adapter-reset-stat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-auth-generate-chappassword'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-get-defalt-auth'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-interface-list-inf'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-isns-get-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-stats-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-target-alias-clearalias'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-target-alias-get-aias'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-v2-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-clear-persistent-resrvation-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-config-check-alua-coflicts-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-create-vld-metadir-etry'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-maxsize'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-space-reservatio-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-target-device-id

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-has-scsi-reservation'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-id-swap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-initiator-logged-in'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-set-device-id'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-set-read-only'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-abort'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-config-set-persisten'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-ipspace-assign'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-resolve'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-vlan-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-exportfs-check-permision'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-stats-top-clients-lit-iter-end'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-stats-top-clients-lit-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-options-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-headers

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-instancs-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-counter-listinfo'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-get-instance'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-portset-remove'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-priority-list-info-defaut'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-qtree-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-qtree-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-quota-off'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-quota-report-iter-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-radius-service-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-reallocate-on'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-registry-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-sis-set-config'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapdiff-iter-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-get-volume-compiance-clock'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-privileged-delee-file'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-set-log-volume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapmirror-quiesce'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapmirror-set-sync-scheule'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-get-schedule'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-partial-restorefile-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-restore-file-ino'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-volume-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-destintions-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-get-reationship-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-snapsht-schedule-status-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-remove-softloc'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-relaionship-status-list-iter-end'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-relaionship-status-list-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-resyc-relationship'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snmp-trap-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-software-async-update'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-software-extract-metadat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-adapter-get-adaper-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-adapter-get-adaper-list'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-shelf-environmen-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-shelf-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-test-iter-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-role-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-role-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-user-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-collect-command-lgs'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-dr-resync'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-get-allowed-protools'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-get-disallowed-prtocols'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-delete-qtee'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-running'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-state'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-performance-monitr-get-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vmservices-vsphere-credetial-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-get-language'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-scrub-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-set-total-files'

=============================================================================================================================

When creating an iSCSI datastore, the following error messages appeared:

Thu Jul 31 10:21:25 GMT [SC1:snmp.link.up:info]: Interface 4 is up

Thu Jul 31 10:21:25 GMT [SC1:netif.linkUp:info]: Ethernet e0d: Link up.

Thu Jul 31 10:21:40 GMT [SC1:snmp.link.up:info]: Interface 2 is up

Thu Jul 31 10:21:40 GMT [SC1:netif.linkUp:info]: Ethernet e0b: Link up.

Thu Jul 31 10:33:01 GMT [SC1:iscsi.service.startup:info]: iSCSI service startup

Thu Jul 31 10:34:51 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this ontroller to

be connected to an ESX host managed by vCenter or manually entered.

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-add'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-filer-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-takeover'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-site-list-ite-end'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-nex'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-stop-on-target'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-get'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-policy-modify'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-reate'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-nameserver-lst-iter-start'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-wwpnalias-get-alias-nfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-destroy-policy'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ipspace-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-adapter-stats-listinfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-add-auth

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-modify-cap-params'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-interface-disable'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-isns-stop'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-v2-delete'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-create-vld-metadir-etry'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-comment'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-abort'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-shutdown-ndmd'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-instancs-iter-next'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-counter-listinfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-reallocate-off'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-sis-set-config'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-snapsht-schedule-status-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snmp-enable'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-initiator-disk-pth-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-user-modify-pasword'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-collect-command-lgs'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-dr-delete'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-get-root-name'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-move-start'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-scrub-stop'

Thu Jul 31 10:49:05 GMT [SC1:app.log.info:info]: vcenter: Provisioning and Cloning Capability 5.0: (0) : Provisioning and Cloning Capability v5.0 createDatatore:

vcUserId: NETAPP\Administrator VMware Version:5.5.0 Build: 1623101 API: 5.5 datastoreName: DS_ISCSI1 datastoreSizeInMB: 10240 autoGrow: false growIncreent: null

maxGrowSize: null containerName: aggr_data volumeName: DS_ISCSI1 thinProvision: true protocol: ISCSI datastore cluster: null lun prefix: null

Thu Jul 31 10:49:07 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:07 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:07 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx01-25cd3422, a session from this iniiator already

exists.

Thu Jul 31 10:49:07 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx02-687fc8d8, a session from this iniiator already

exists.

Thu Jul 31 10:49:08 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:08 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:25 GMT [SC1:wafl.spacemgmnt.policyChg:info]: The space management policy for volume DS_ISCSI1 has changed: autosize volume growth increment 98720KB,

autosize volume maximum size 31981568KB, autosize state enabled.

Thu Jul 31 10:49:28 GMT [SC1:lun.map:info]: LUN /vol/DS_ISCSI1/DS_ISCSI1 was mapped to initiator group rcu_generated=0

Thu Jul 31 10:49:28 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:28 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:28 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx01-25cd3422, a session from this iniiator already

exists.

Thu Jul 31 10:49:28 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx02-687fc8d8, a session from this iniiator already

exists.

Thu Jul 31 10:49:30 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:30 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:36 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:36 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.12.41

Thu Jul 31 10:51:56 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this ontroller to

be connected to an ESX host managed by vCenter or manually entered.

Thu Jul 31 10:52:15 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-ou-list-iter-ext'

Thu Jul 31 10:52:15 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-verify-name'

SC1> Thu Jul 31 11:00:03 GMT [SC1:kern.uptime.filer:info]: 11:00am up 8 days, 7:58 0 NFS ops, 0 CIFS ops, 0 HTTP ops, 0 FCP ops, 2644 iSCSI ops

SC1> useradmin role list

Name: VSCadminRole.1

Info: This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: api-file-delete-file,api-file-get-file-info,api-file-read-file,api-file-write-file,api-iscsi-connection-list-info,api-iscsi-session-list-info,api-

lun-get-geometry,api-useradmin-domainuser-list,api-useradmin-group-list,cli-cifs,cli-df,cli-ifconfig,cli-mv,cli-ndmpcopy,cli-ndmpd,api-igroup-add,api-igroup-create,api-

igroup-set-attribute,api-lun-create-by-size,api-lun-create-from-file,api-lun-initiator-list-map-info,api-lun-map,api-lun-move,api-lun-online,api-lun-set-comment,api-lun-

unmap,api-nfs-exportfs-append-rules-2,api-nfs-exportfs-load-exports,api-nfs-exportfs-modify-rule-2,api-sis-enable,api-sis-start,api-sis-stop,api-snapmirror-break,api-

snapmirror-delete-schedule,api-snapmirror-get-status,api-snapmirror-initialize,api-snapmirror-off,api-snapmirror-on,api-snapmirror-release,api-snapmirror-resync,api-

snapmirror-set-schedule,api-snapmirror-update,api-snapshot-create,api-snapshot-set-reserve,api-vfiler-add-storage,api-volume-autosize-set,api-volume-clone-create,api-

volume-create,api-volume-restrict,api-volume-set-option

Name: VSCadminRole.2

Info: This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: cli-iscsi,cli-lun,cli-qtree,cli-vfiler,api-lun-resize,api-sis-disable,api-volume-size,api-file-punch-hole,api-lun-destroy,api-lun-offline,api-

volume-destroy,api-volume-offline,api-file-list-directory-iter-end,api-file-list-directory-iter-next,api-file-list-directory-iter-start,api-igroup-destroy,api-iscsi-

initiator-list-info,api-iscsi-node-get-name,api-lun-create-from-snapshot,api-lun-get-serial-number,api-lun-restore-status,api-nfs-exportfs-storage-path,api-snapmirror-

list-destinations,api-snapshot-delete,api-snapshot-rename,api-snapshot-restore-file,api-snapshot-restore-volume,api-vfiler-create,cli-snap,cli-system

Name: VSCadminRole

Info: This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: api-aggr-list-info,api-cf-get-partner,api-cf-status,api-disk-list-info,api-ems-autosupport-log,api-fcp-adapter-initiators-list-info,api-fcp-

adapter-list-info,api-fcp-get-cfmode,api-fcp-node-get-name,api-fcp-service-status,api-igroup-list-info,api-iscsi-adapter-initiators-list-info,api-iscsi-adapter-list-

info,api-iscsi-portal-list-info,api-iscsi-service-status,api-lun-get-vdisk-attributes,api-lun-list-info,api-lun-map-list-info,api-net-ifconfig-get,api-nfs-exportfs-list-

rules-2,api-nfs-exportfs-list-rules,api-nfs-status,api-qtree-list,api-quota-report,api-snapmirror-get-volume-status,api-snapshot-list-info,api-snmp-get-next,api-snmp-

get,api-system-api-list,api-system-cli,api-system-get-info,api-system-get-ontapi-version,api-system-get-version,api-useradmin-user-list,api-vfiler-get-status,api-vfiler-

list-info,api-volume-autosize-get,api-volume-list-info-iter-end,api-volume-list-info-iter-next,api-volume-list-info-iter-start,api-volume-options-list-info,login-http-

admin,security-api-vfiler,security-priv-diagnostic,api-copyoffload-show,api-license-v2-list-info,api-feature-status-list-info,api-clone-*,api-fcp-port-name-list-

info,api-file-create-directory,api-file-delete-directory

Name: admin

Info:

Allowed Capabilities: login-*,cli-*,api-*,security-*

Name: audit

Info:

Allowed Capabilities: api-snmp-get,api-snmp-get-next

Name: backup

Info: Default role for NDMP privileges.

Allowed Capabilities: login-ndmp

Name: compliance

Info: Default role for compliance privileges.

Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh,api-system-api-*,cli-

snaplock*,api-snaplock-*,api-file-*,compliance-*

Name: none

Info:

Allowed Capabilities:

Name: power

Info:

Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh

Name: root

Info:

Allowed Capabilities: *

SC1> useradmin user list VSCadmin

Name: VSCadmin

Info: This is an auto-generated username created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Rid: 131074

Groups: VSCadminGrp

Full Name:

Allowed Capabilities: api-aggr-list-info,api-cf-get-partner,api-cf-status,api-disk-list-info,api-ems-autosupport-log,api-fcp-adapter-initiators-list-info,api-fcp-

adapter-list-info,api-fcp-get-cfmode,api-fcp-node-get-name,api-fcp-service-status,api-igroup-list-info,api-iscsi-adapter-initiators-list-info,api-iscsi-adapter-list-

info,api-iscsi-portal-list-info,api-iscsi-service-status,api-lun-get-vdisk-attributes,api-lun-list-info,api-lun-map-list-info,api-net-ifconfig-get,api-nfs-exportfs-list-

rules-2,api-nfs-exportfs-list-rules,api-nfs-status,api-qtree-list,api-quota-report,api-snapmirror-get-volume-status,api-snapshot-list-info,api-snmp-get-next,api-snmp-

get,api-system-api-list,api-system-cli,api-system-get-info,api-system-get-ontapi-version,api-system-get-version,api-useradmin-user-list,api-vfiler-get-status,api-vfiler-

list-info,api-volume-autosize-get,api-volume-list-info-iter-end,api-volume-list-info-iter-next,api-volume-list-info-iter-start,api-volume-options-list-info,login-http-

admin,security-api-vfiler,security-priv-diagnostic,api-copyoffload-show,api-license-v2-list-info,api-feature-status-list-info,api-clone-*,api-fcp-port-name-list-

info,api-file-create-directory,api-file-delete-directory,api-file-delete-file,api-file-get-file-info,api-file-read-file,api-file-write-file,api-iscsi-connection-list-

info,api-iscsi-session-list-info,api-lun-get-geometry,api-useradmin-domainuser-list,api-useradmin-group-list,cli-cifs,cli-df,cli-ifconfig,cli-mv,cli-ndmpcopy,cli-

ndmpd,api-igroup-add,api-igroup-create,api-igroup-set-attribute,api-lun-create-by-size,api-lun-create-from-file,api-lun-initiator-list-map-info,api-lun-map,api-lun-

move,api-lun-online,api-lun-set-comment,api-lun-unmap,api-nfs-exportfs-append-rules-2,api-nfs-exportfs-load-exports,api-nfs-exportfs-modify-rule-2,api-sis-enable,api-

sis-start,api-sis-stop,api-snapmirror-break,api-snapmirror-delete-schedule,api-snapmirror-get-status,api-snapmirror-initialize,api-snapmirror-off,api-snapmirror-on,api-

snapmirror-release,api-snapmirror-resync,api-snapmirror-set-schedule,api-snapmirror-update,api-snapshot-create,api-snapshot-set-reserve,api-vfiler-add-storage,api-

volume-autosize-set,api-volume-clone-create,api-volume-create,api-volume-restrict,api-volume-set-option,cli-iscsi,cli-lun,cli-qtree,cli-vfiler,api-lun-resize,api-sis-

disable,api-volume-size,api-file-punch-hole,api-lun-destroy,api-lun-offline,api-volume-destroy,api-volume-offline,api-file-list-directory-iter-end,api-file-list-

directory-iter-next,api-file-list-directory-iter-start,api-igroup-destroy,api-iscsi-initiator-list-info,api-iscsi-node-get-name,api-lun-create-from-snapshot,api-lun-get-

serial-number,api-lun-restore-status,api-nfs-exportfs-storage-path,api-snapmirror-list-destinations,api-snapshot-delete,api-snapshot-rename,api-snapshot-restore-

file,api-snapshot-restore-volume,api-vfiler-create,cli-snap,cli-system

Password min/max age in days: 0/4294967295

Status: enabled

SC1> useradmin group list

Name: Administrators

Info: Members can fully administer the filer

Rid: 544

Roles: admin

Name: Backup Operators

Info: Members can bypass file security to backup files

Rid: 551

Roles: backup,none

Name: Compliance Administrators

Info: Members can perform compliance operations

Rid: 131072

Roles: compliance

Name: Guests

Info: Users granted Guest Access

Rid: 546

Roles: none

Name: Power Users

Info: Members that can share directories

Rid: 547

Roles: power

Name: Replicators

Info: not supported

Rid: 552

Roles: none

Name: Users

Info: Ordinary Users

Rid: 545

Roles: audit

Name: VSCadminGrp

Info: This is an auto-generated group created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Rid: 131073

Roles: VSCadminRole,VSCadminRole.1,VSCadminRole.2

SC1>

So in conclusion: Either VSC 5 is trying to do a whole lof of 'unnecessary' stuff, or RBAC-UC is missing a whole lot of capabilities...

What is the reason for some of the more exotic 'missing required capabilities', e.g. api-cifs-share-list-iter-next
Can DBKelly get a complete list of VSC capabilities (don't know, if this log caught them all), so we can fix the XML file...
- I cross-posted to the RBAC-UC forum

-Sebastian

topic VSC 5, ONTAP 8.2.1, RBAC-UC -> missing capabilities in VMware Solutions Discussions

VSC 5, ONTAP 8.2.1, RBAC-UC -> missing capabilities