Effective December 3, NetApp adopts Microsoft’s Business-to-Customer (B2C) identity management to simplify and provide secure access to NetApp resources.
For accounts that did not pre-register (prior to Dec 3), access to your NetApp data may take up to 1 hour as your legacy NSS ID is synchronized to the new B2C identity.
To learn more, read the FAQ and watch the video.
Need assistance? Complete this form and select “Registration Issue” as the Feedback Category.

Active IQ Unified Manager Discussions

GlobalRead access issue

HASMIK_HAYRAPETYAN

Hi All,

I have created a separate user for the machine where I have DFM server installed. Then added this user as administrative user in DFM Web console and assigned it GlobalRead permission.

Now I am trying to connect to the DFM server with that user. When I use Web console, I can see all the information in Web UI, bet when I use the same user to connect to the server through DFM API, I get following exception:

netapp.manage.NaAPIFailedException: User XXXX does not have permission to proxy the API lun-list-info to host YYYY. (errno=22256)

When I assign GlobalFullControl role to the user instead of GlobalRead role, the issue is gone and I can get data.

What I need is to be able to retrieve data through user with GlobalRead permission, which seems is possible.

Can anyone help me with this? Do I need to do some additional configuration on DFM side?

Thanks a lot for your help.

2 REPLIES 2

HASMIK_HAYRAPETYAN

I want to add another important point here that I missed.

I am using DFM API api-proxy to call ontap-api's lun-list info function. And the error I get is related to that call.

Hello Hasmik,

Did you find out anything how to avoid the below error and still continue with the  GlobalRead permission.

Even I have a similar case wherein my developer team gets the same error as below.

2014-08-12 15:59:02,847 ERROR [pool-21-thread-1] NetAppOntapiNfsExportsService5: NetApp - Unable to obtain Nfs Exports for Device Name: <vfiler name> Id: 5279.  NaAPIFailedException. THIRD_PARTY_ERROR: User svcstg_infradev does not have permission to proxy the API nfs-exportfs-list-rules to host 168437. (errno=22256).

The user with which they run their API calls was having GlobalRead access and it CANT be promoted for GlobalFullControl.

Please advice.

balaji

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public