NetApp Data ONTAP/Lenovo Thinksystem DM Permissions

The account used to connect to a NetApp Data ONTAP/Lenovo Thinksystem DM storage system must have permissions described in this section. The commands are provided for the console, UI names may differ.

7-Mode

  • login-http-admin
  • api-system-*
  • api-license-* (api-license-list-info)
  • api-volume-*
  • api-net-*
  • api-options-*
  • api-vfiler-*
  • api-qtree-*
  • api-nfs-*
  • api-snapshot-*
  • api-lun-*
  • api-iscsi-*
  • api-feature-*
  • api-registry-*
  • api-fcp-*
  • api-file-*
  • api-igroup-*
  • api-clone-*
  • api-snapvault-*
  • api-snapmirror-*
  • api-cf-*
  • cli-options
  • security-api-vfiler

CDOT (VMware Integration)

Command/Directory

Access/Query Level

DEFAULT

readonly

cluster

readonly

metrocluster

readonly

vserver fcp

readonly

volume file

readonly

lun igroup

all

vserver iscsi

all

network

readonly

system node

readonly

security

readonly

security login

readonly

set

readonly

snapmirror

all

system

readonly

version

readonly

volume qtree

readonly

lun

all

vserver nfs

all

volume snapshot

all

volume

all

vserver

all

Only as SVM (VMware Integration)

Command/Directory

Access/Query Level

DEFAULT

none

lun

all

lun igroup

all

network

readonly

security

readonly

security login

readonly

snapmirror

all

system

readonly

version

readonly

volume

all

volume file

readonly

volume qtree

all

volume snapshot

all

vserver

all

vserver fcp

all

vserver iscsi

all

vserver nfs

all

CDOT (NAS Backup Integration)

Command/Directory

Access/Query Level

DEFAULT

readonly

security

readonly

security login

readonly

volume snapshot

all

vserver

all

vserver nfs

all

Only as SVM (NAS Backup Integration)

Command/Directory

Access/Query Level

DEFAULT

none

lun

readonly

network

readonly

security

readonly

security login

readonly

snapmirror

readonly

version

readonly

volume

readonly

volume snapshot

all

vserver

all

CDOT (Veeam Agent Integration)

Command/Directory

Access/Query Level

cluster

readonly

lun

all

metrocluster

readonly

network

readonly

system license

readonly

system node

readonly

version

readonly

volume

all

volume snapshot

all

vserver

all

Only as SVM (Veeam Agent Integration)

Command/Directory

Access/Query Level

lun

all

network

readonly

version

readonly

volume

all

volume snapshot

all

vserver

all