I need to just give a user only read access (ssh access) to aggr status command.
I created a role with "cli-aggr" capability but then he has access to aggr destroy which I don't want. Is this possible ?
Is there a document which explains a list of cli/api's that a read only user should have ?
I hope these api will help you .
Create a role with these and then give a try.
This will not work as these are api commands and will not work for ssh access. They will work for OnCommand System Manager.