Create a user limited to create/delete snapshots on ontap 8.3

[SorinAndruseac]

Hello,

I'm trying to create a user/pass to conect to the netapp storage from powershell and create/delete snapshots using this account. Preferable to have a more restrictive set of permissions.

And also a document on svm users vs cluster users if anyone knows, besides system administration guide.

BIG THANKS for any ideea.

[georgevj · Accepted solution]

security login role create snapRole -cmddirname "volume snapshot" -access all -vserver <vservername>
security login role modify -role snapRole -cmddirname DEFAULT -vserver <vservername> -access none
security login create -user-or-group-name snapUser -application ontapi -authmethod password -role snapRole -vserver <vservername>

[SorinAndruseac]

This is briliant, 

However when trying to connect on the managment interface of the svm, I get this error:

Connect-NcController : Insufficient privileges: user 'snapUser' does not have read access to this resource

[SorinAndruseac]

I had to add the following. Seems to be working.

security login role modify -role snapRole -cmddirname version -vserver <vservername> -access all

BIG THANKS for the ideea 

[georgevj]

You are welcome!

Its good to know that I did help someone today 🙂

Much Appreciated.