I want to add capability to a role that allows user only to execute "vfiler run * qtree status". Or "vfiler run * (any command)", using cli-vfiler enables add, remove operations as well.
How do I create a readonly privilege?
you can't https://kb.netapp.com/support/index?page=content&id=2011607, if your'e coming from the vfiler0 your'e root in the vfilers.
need to think on another solution...
if it's really qtree status that youre after. "qtree status -v" from vfiler0 will include the vfiler names.