Well yes and no, I tried the same technique… I even tried just to create my own role with “DEFAULT / ALL” defined just like the admin role… but once I assigned this to a user he was no longer able to login to the web GUI…

 

BTW. The link you send it for OCUM and as far as I know that uses the API to talk to the cluster… 😊

 

/Heino

 

Fra: vwpolo1234@gmx.de <vwpolo1234@gmx.de>
Dato: tirsdag, 1. december 2020 kl. 08.56
Til: Heino Walther <hw@beardmann.dk>
Cc: mE <notsoworried@gmail.com>, toasters@teaparty.net <toasters@teaparty.net>
Emne: Aw: SV: Security Roles...

 

Have you tried this KB ?:

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/OnCommand_Suite/How_to_create_a_custom_role_and_user_for_OnCommand_System_Manager_in_ONTAP_9x

 

 

Works fine with a SIM

Gesendet: Montag, 30. November 2020 um 19:47 Uhr
Von: "Heino Walther" <hw@beardmann.dk>
An: "mE" <notsoworried@gmail.com>
Cc: "toasters@teaparty.net" <toasters@teaparty.net>
Betreff: SV: Security Roles...

OK thanks.. make sense (sadly).

Would have been great to allow users to login and perform certain tasks.

Guess they will all just have to learn command-line or REST 😉

 

/Heino

 

 

Fra: mE <notsoworried@gmail.com>
Dato: mandag, 30. november 2020 kl. 19.44
Til: Heino Walther <hw@beardmann.dk>
Cc: toasters@teaparty.net <toasters@teaparty.net>
Emne: Re: Security Roles...

We ran into this same issue, trying to create RO user for GUI and found that custom roles are not supported for login to sysmgr. That same user could ssh with the same role defined, but no GUI.

 

 

_______________________________________________ Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters