NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

Active IQ Unified Manager Discussions

QUESTION - The minimum RBAC configuration of capabilities for OnCmd / Perf Advisor to use

ESYNODINOS
3,008 Views

Hello

I am working on a customer deployment for OnCommand UM v 5.1 with Perform Advisor

Right now we are using the filer's ROOT account to run DFM initially but we need to use a user that can be used with DFM for all its monitoring functions but not be allowed to send commands to the filer through the "Run a Command" feature to say ... "halt" a filer.

Based on this article - https://kb.netapp.com/support/index?page=content&id=1011412&locale=en_US we tried the 8.0.3 ( we are on 8.1.2 ) and the list of capabilities there seems not to be enough ( Perf Advisor was RED - unable to collect, even though DFM HOST DIAG was 100% pass ).  Once we used root, we can collect performance data.

Is there a well known set of capabilities DFM needs or is a pre-defined role good enough, like Power User?

We are looking at the roles more carefully but I wanted to start a conversation here.

Thanks, Emanuel

1 REPLY 1

JAROSLAWZAKRZEWSKI
3,008 Views

You are not only one whit this problem. Can NetApp support anwser this question?

Public