Hello fellow admins! I want to create a role that allows login to System Manager + full File System Analytics functionality but no other rights. I am having difficulty and could use some advice!
The first KB below describes creating a role like the one I want, but it doesn't work. To simplify, I gave the role "All File System Analytics operations" rights, using /*/ for the UUID. I created the domain account with the http, ontapi, and ssh applications. When trying to log in, I just got the spinning 'wait' icon with no error and no end in sight.
The second KB mentions the new built-in admin-no-fsa role which is actually to restrict FSA, however I thought it might help to see what it does so I could tweak a copy. I logged in this time but had too many admin rights, plus the two areas of FSA that should have been read only were not visible.
Any recommendations?
https://docs.netapp.com/us-en/ontap/file-system-analytics/role-based-access-control-task.html
https://docs.netapp.com/us-en/ontap/authentication/predefined-roles-cluster-administrators-concept.html
