Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Multi-admin-verification query - any way to exclude application accounts?
2024-12-11
06:04 AM
563 Views
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Commvault is triggering ontap snapshot creation/deletion via AIQUM. with MAV rule "volume snapshot delete" this creates an approval request instead of just deleting it. I am wondering if there is any way to exclude this account from this rule. so something like operation="volume snapshot delete" and query="-requested-user=!<AIQUM account>".
For the query options I have not found any documentation.
2 REPLIES 2
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Only one MAV rule can be created per operation; for example, you cannot make multiple volume-snapshot-delete rules. Any desired rule constraints must be contained within one rule.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is clear to me. using the query option you can make sure snaphot delete operations will not require additional approval for volumes matching a pattern:
rule create -operation="volume snapshot delete" -query="-volume !CC_CVLT*"
with this rule deleting snapshots will trigger an approval request only for volumes not starting with this pattern. I would like to know if this can also be done with requested user but I have not found any detailed documentation for available options.
