NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

ONTAP Discussions

ActiveIQ Unified Manager Least Privilege Account

TMADOCTHOMAS
4,655 Views

ActiveIQ Unified Manager documentation says the following about the local account used for discovery:

 

------------------------------------

This account must have the admin role with Application access set to ontapi, ssh, and http.

------------------------------------

 

My question: is this really accurate? I don't see why it requires the admin role since AIUM is just reading data to populate charts and tables. Anyone have insight here? We are trying to reduce service accounts to the least amount of permissions needed and I'm thinking this is a good candidate for reduction, but documentation says otherwise.

3 REPLIES 3

Mjizzini
4,566 Views

This account must have the admin role with Application access set to ontapi, ssh, and http

 

Unable to add cluster to Active IQ Unified Mana

TMADOCTHOMAS
4,550 Views

Okay thank you @Mjizzini. Are there any recommendations to securing this account since it has to have these rights?

liu
2,251 Views

It is convenient for you to obtain the health of the cluster, capacity performance, so that you can find and solve problems in time

What permissions are required to add a cluster to AIQUM? - NetApp Knowledge Base

Public