Hi.
Thanks for this document.
There is also this KB: https://kb.netapp.com/support/index?page=content&id=1011412
Maybe someone should align/update it... or, even better, NetApp should per default have a "read only" local group for such things... and also a "change" and "full permission" [Administrators is there already, I know] local group.. then we could just add "domain users/groups" to those different local users and maintain all the permission where it belongs... in name services.
Regards
Anton