What API capabilities should be given to the account used by VEEAM to access a filer?

[rh]

If you have created an account on a NetApp filer for use by VEEAM, I'd be interested to know what privileges you granted the account. My preference is always to grant only the minimum set rather than just allowing everything in the interests of getting things running quickly.

Thanks!

Richard.

[moep · Accepted solution]

I just sorted it out for CDOT.

security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "cluster identity show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "lun show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "metrocluster show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "network interface show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "network port show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "version" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver show" -access readonly
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver export-policy rule show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver fcp interface show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver nfs status" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "vserver peer show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot delete" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot modify" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot partial-restore-file" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot policy show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot rename" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot restore-file" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume snapshot restore" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone split start" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume clone split stop" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume destroy" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "volume qtree show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror create" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror delete" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror modify" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror list-destinations" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror get-volume-status" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror abort" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror break" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show-communication" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror config-replication status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror promote" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror quiesce" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror release" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror restore" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror resume" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror resync" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "snapmirror update" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "system license status show" -access all
security login role create -vserver [CLUSTER] -role veeam_backup_role -cmddirname "system node show" -access readonly