ONTAP Discussions

cmddirnames required for a role able to manage "Allow clients to access Snapshot copies directory"

AleTinivelli
16 Views

Good day, we want to have a role for a user that is able to expose/hide Snapshots to the clients, both at volume level and share level. We tried with these cmddirnams:

 

  • volume show
  • volume modify
  • vserver cifs share show
  • vserver cifs share properties

but when managing at level share, I still recieve "you aren't authorized to perform this operation"

 

Could someone help?

thanks in advance

Alessandro Tinivelli | blog.tinivelli.com | VMCE 2024 | Veeam Legend | VCP-DCV 2023 | vExpert 2026
1 REPLY 1

AleTinivelli
1 View

full permissions already owned (not enough to work) by the role are:
command                                access level
DEFAULT                                   readonly
snapmirror                              readonly
snapmirror create                all
snapmirror initialize           all
snapmirror show                  all
storage aggregate                 readonly
volume                                      readonly
volume create                        all
volume efficiency                 all
volume encryption conversion all
volume modify                       all
volume mount                        all
volume show                            all
vserver                                        readonly
vserver cifs share create     readonly
vserver cifs share delete     readonly
vserver cifs share modify    readonly
vserver cifs share properties all
vserver cifs share show readonly

 

P.S.: important note: we are trying to make this user work from the GUI, not CLI

Alessandro Tinivelli | blog.tinivelli.com | VMCE 2024 | Veeam Legend | VCP-DCV 2023 | vExpert 2026
Public