Introduction:
The RBAC User Creator forData ONTAP® tool is a C# application that assists you in creating RBAC usernames within Data ONTAP.This application is used to create usernames in both 7-mode and Clustered Data ONTAP environments. It takes care of the small differences between the Data ONTAP versions as well as the variances with the NetApp products using them.
The lists of privileges being created are stored in XML (ontapPrivs.xml). This was done for two primary reasons:
1. You can clearly see the privileges so there is complete transparency with regards to the new user RBAC User Creator is creating
2. Additional privileges and products can be added later without the need to recompile the application.
NOTE: An important feature of version 2.0 is the ability to add products without needing to recomplie the application
You can think of RBAC User Creator being a framework of sorts. All the products and privileges for those products are listed in the XML file. Adding support for another product or product version is as simple as adding the information in the XML file.
RBAC User Creator has native support for the following products out of the box
- Virtual Storage Console for VMware vSphere
- OnCommand Balance
- Snap Creator Framework
- SnapDrive for Windows
- VASA Provider for VMware vCenter
- Storage Replication Adapter for VMware Site Recovery Manager
- Virtual Storage Console for Citrix XenServer
- Virtual Storage Console for RHEV
- NetApp Recovery Manager for Citrix Sharefile
- OnCommand Unified Manager (DFM) 5.1
- VMTurbo Operations Manager
Step 1: Install Tool
Install the tool by selecting "Run as Administrator". Standard Installshield rules apply. If you don't "Run as Administrator", the log file will not be created.
Step 2: Set Up Usernames and Privileges
In just a few short clicks you can create ONTAP usernames with all the required privileges needed by VSC. In order to guide you along, the non-relevant sections are greyed out.
- Simply enter the root or admin username and IP of the storage system you want to create the user on.
- Click the LOGIN button, and it will login and determine the controller type.
- If the storage system is running Clustered Data ONTAP, the list of Vservers will be displayed.
- RBAC User Creator supports creating users on the Cluster-Admin Vserver as well as on Data Vservers. Simply select the Vserver from the pull-down list.
NOTE: RBAC User Creator requires root/admin storage credentials for creating new usernames.
For more details, please read the User Guide (attached below)
Step 3: Add Roles for Users
RBAC User Creator handles all the differences between 7-mode and Clustered Data ONTAP
- Simply select your VSC version you're using, and the roles you want the new user to have
- Choose the product and product version
- RBAC User Creator will merge all the privileges from the selected roles and combine them in a sorted list
- Since there is an ONTAP limit in the number to privileges in a role, RBAC User Creator will create iterated roles names in the form of <rolename>.X.
- In the case of Clustered Data ONTAP, it handles both the read-only and all-access privileges
If you are unsure on what privileges the new user will have, click on the PREVIEW button to preview the list. It will show you the sorted list of all the privileges to be added. If the storage system is running 7-mode, it will create an EMS log detailing the creation of this new username. Hopefully, this funcationalit will be added for Clustered Data ONTAP soon.
Step 4: Add Storage Systems
- Login into your application
- add the storage system using the new username
Resources:
- Download RBAC User Creator for Data ONTAP
- Comment below by @mentioning dbkelly (For any issues: include the ONTAPUserCreator.log file in your comment)
Please Note:
All content posted on the NetApp Community is publicly searchable and viewable. Participation in the NetApp Community is voluntary.
In accordance with our Code of Conduct and Community Terms of Use, DO NOT post or attach the following:
- Software files (compressed or uncompressed)
- Files that require an End User License Agreement (EULA)
- Confidential information
- Personal data you do not want publicly available
- Another’s personally identifiable information (PII)
- Copyrighted materials without the permission of the copyright owner
Continued non-compliance may result in NetApp Community account restrictions or termination.
- Products and Services
- General Discussion & Community Support
- Developer Network
- NetApp Learning Services
- Blogs
- Tech ONTAP Newsletter
