Ah, that’s interesting. You should at least upgrade to VSC 2.1 (available at the netapp support portal).
Bye,
Alexander Griesser
System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320
Telefax: +43-463-208501-500
E-Mail: ag@anexia.at
Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Von: Carl Howell [mailto:chowell@uwf.edu]
Gesendet: Mittwoch, 30. Mai 2012 21:32
An: Alexander Griesser
Cc: Learmonth, Peter; toasters@teaparty.net
Betreff: Re: VSC Privilege
So, given this http://support.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=450803 the question is whether this bug exists in version 4.
--Carl
On Wed, May 30, 2012 at 2:27 PM, Alexander Griesser <ag@anexia.at> wrote:
Yah, saw that afterwards.
The correct KB (which also takes OnTap 8.0.1+ and VSC4.0 into consideration) is this one:
https://kb.netapp.com/support/index?page=content&id=1013627
But still, api-useradmin-user-list is the capability he was looking for J
bye
Alexander Griesser
System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320
Telefax: +43-463-208501-500
E-Mail: ag@anexia.at
Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Von: Learmonth, Peter [mailto:Peter.Learmonth@netapp.com]
Gesendet: Mittwoch, 30. Mai 2012 21:24
An: Alexander Griesser; Carl Howell
Cc: toasters@teaparty.net
Betreff: RE: VSC Privilege
Vaughn's blogs are good stuff, but that one is a little dated. I suggest the KB articles specific to VSC RBAC which are maintained by Gabe Lowe, one of our support guys who lives this stuff every day!
https://kb.netapp.com/support/index?page=content&id=1012974 (VSC 2.1)
https://kb.netapp.com/support/index?page=content&id=1012973 (VSC 2.0)
The KBs also cross reference for different versions of VSC.
Share and enjoy!
Peter
From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Alexander Griesser
Sent: Wednesday, May 30, 2012 10:59 AM
To: Carl Howell
Cc: toasters@teaparty.net
Subject: AW: VSC Privilege
Which OnTap version are you using?
Alexander Griesser
System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320
Telefax: +43-463-208501-500
E-Mail: ag@anexia.at
Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Von: Carl Howell [mailto:chowell@uwf.edu]
Gesendet: Mittwoch, 30. Mai 2012 19:50
An: Alexander Griesser
Cc: toasters@teaparty.net
Betreff: Re: VSC Privilege
useradmin-user-list? That's what I said. The other privileges are already covered...
--Carl
On Wed, May 30, 2012 at 12:22 PM, Alexander Griesser <ag@anexia.at> wrote:
Useradmin-user-list? J
You will also need other privileges, I suggest you create a new role as outlined here:
bye,
Alexander Griesser
System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320
Telefax: +43-463-208501-500
E-Mail: ag@anexia.at
Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Carl Howell
Gesendet: Mittwoch, 30. Mai 2012 18:03
An: toasters@teaparty.net
Betreff: VSC Privilege
I'm trying to get the Virtual Storage Console working using a domain account. Every time I try to log in, it gives me "In order to determine which controller privileges are allowed for this username, the following controller privilege is required: useradmin-user-list"
The domain user account I'm using is a member of a group on the filers that has a role with login-*, api-*, and cli-* capabilities. What am I missing?
Thanks,
Carl