Re: SVM Admin Access

"Sebastian P. Goetze" <[email protected]>
Newsgroups gmane.comp.hardware.netapp
Message-ID <CABvp6yFg=rRs=aXjUrnkO7AczUGRL47DrVWVS5wu2tF4=-zAiA@mail.gmail.com>
From what I hear from my students, most of the time they solve this problem
by telling the admins to use the MMC.

Would that solve your problem?
They can create shares in existing volumes there... If necessary the
volumes could auto-grow... And it's a familiar interface and you could give
them access easily with their domain accounts and the predefined role
vsadmin-protocol (or vsadmin-volume).

Just saying...

Sebastian



sent from my mobile, spellchecker might have messed up...

On Wed, 23 Sep 2020, 00:28 Philbert Rupkins <[email protected]>
wrote:

> Toasters,
>
> I work with a team of Windows Server admins who are open to
> provisioning their own storage but strongly prefer a GUI.   I'd like
> to provide this ability by granting System Manager access to the
> specific SVM's that host their resources.
>
> Much to my chagrin, it doesn't appear RBAC allows for System Manager
> access to particular SVMs.   Instead, privileges must be granted at
> the cluster level which of course means those privs are effective for
> all data SVMs (this is a non-starter).
>
> Per NetApp docs, my only option appears to be SVM level RBAC privs via
> SSH.  Not quite the GUI option they are looking for but,
> organizationally, we're making a push for more automation and use of
> Ansible so it's not completely out of the question.
>
> Is there an angle Im not considering that would allow for SVM level
> access via System Manager?   Has anybody else come up with creative
> ways to address this problem?
>
> I'd love to hear from you.
>
> Thanks,
> Phil
> _______________________________________________
> Toasters mailing list
> [email protected]
> https://www.teaparty.net/mailman/listinfo/toasters
>

_______________________________________________
Toasters mailing list
[email protected]
https://www.teaparty.net/mailman/listinfo/toasters
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.