I'm attempting to restrict roles on my FAS DOT 9.1 to give a user as minimal permissions as possible. One of the API calls they use is system-get-vendor-info which ONTAP claims maps to 'system node autosupport show' which I have added to my role. Problem is it doesn't return an answer for the restricted role.... but does for the full admin user. Do have I have to 'try' all 1307 possibilities? Anyone got any ideas which permissions I need to add to get this to work?