Which OnTap version are you using?

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320

Telefax: +43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Carl Howell [mailto:chowell@uwf.edu] Gesendet: Mittwoch, 30. Mai 2012 19:50 An: Alexander Griesser Cc: toasters@teaparty.net Betreff: Re: VSC Privilege

useradmin-user-list? That's what I said. The other privileges are already covered...

--Carl

On Wed, May 30, 2012 at 12:22 PM, Alexander Griesser ag@anexia.at wrote:

Useradmin-user-list? J

You will also need other privileges, I suggest you create a new role as outlined here:

https://communities.netapp.com/community/netapp-blogs/virtualstorageguy/blog...

bye,

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320 tel:%2B43-463-208501-320

Telefax: +43-463-208501-500 tel:%2B43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Carl Howell Gesendet: Mittwoch, 30. Mai 2012 18:03 An: toasters@teaparty.net Betreff: VSC Privilege

I'm trying to get the Virtual Storage Console working using a domain account. Every time I try to log in, it gives me "In order to determine which controller privileges are allowed for this username, the following controller privilege is required: useradmin-user-list"

The domain user account I'm using is a member of a group on the filers that has a role with login-*, api-*, and cli-* capabilities. What am I missing?

Thanks,

Carl

Yah, saw that afterwards.

The correct KB (which also takes OnTap 8.0.1+ and VSC4.0 into consideration) is this one:

https://kb.netapp.com/support/index?page=content&id=1013627

But still, api-useradmin-user-list is the capability he was looking for J

bye

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320

Telefax: +43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Learmonth, Peter [mailto:Peter.Learmonth@netapp.com] Gesendet: Mittwoch, 30. Mai 2012 21:24 An: Alexander Griesser; Carl Howell Cc: toasters@teaparty.net Betreff: RE: VSC Privilege

Vaughn's blogs are good stuff, but that one is a little dated. I suggest the KB articles specific to VSC RBAC which are maintained by Gabe Lowe, one of our support guys who lives this stuff every day! https://kb.netapp.com/support/index?page=content&id=1012974 (VSC 2.1)

https://kb.netapp.com/support/index?page=content&id=1012973 (VSC 2.0)

The KBs also cross reference for different versions of VSC.

Share and enjoy!

Peter

From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Alexander Griesser Sent: Wednesday, May 30, 2012 10:59 AM To: Carl Howell Cc: toasters@teaparty.net Subject: AW: VSC Privilege

Which OnTap version are you using?

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320

Telefax: +43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Carl Howell [mailto:chowell@uwf.edu] Gesendet: Mittwoch, 30. Mai 2012 19:50 An: Alexander Griesser Cc: toasters@teaparty.net Betreff: Re: VSC Privilege

useradmin-user-list? That's what I said. The other privileges are already covered...

--Carl

On Wed, May 30, 2012 at 12:22 PM, Alexander Griesser ag@anexia.at wrote:

Useradmin-user-list? J

You will also need other privileges, I suggest you create a new role as outlined here:

https://communities.netapp.com/community/netapp-blogs/virtualstorageguy/blog...

bye,

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320 tel:%2B43-463-208501-320

Telefax: +43-463-208501-500 tel:%2B43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Carl Howell Gesendet: Mittwoch, 30. Mai 2012 18:03 An: toasters@teaparty.net Betreff: VSC Privilege

I'm trying to get the Virtual Storage Console working using a domain account. Every time I try to log in, it gives me "In order to determine which controller privileges are allowed for this username, the following controller privilege is required: useradmin-user-list"

The domain user account I'm using is a member of a group on the filers that has a role with login-*, api-*, and cli-* capabilities. What am I missing?

Thanks,

Carl

Ah, that's interesting. You should at least upgrade to VSC 2.1 (available at the netapp support portal).

Bye,

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320

Telefax: +43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Carl Howell [mailto:chowell@uwf.edu] Gesendet: Mittwoch, 30. Mai 2012 21:32 An: Alexander Griesser Cc: Learmonth, Peter; toasters@teaparty.net Betreff: Re: VSC Privilege

So, given this http://support.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=450803 the question is whether this bug exists in version 4.

--Carl

On Wed, May 30, 2012 at 2:27 PM, Alexander Griesser ag@anexia.at wrote:

Yah, saw that afterwards.

The correct KB (which also takes OnTap 8.0.1+ and VSC4.0 into consideration) is this one:

https://kb.netapp.com/support/index?page=content&id=1013627

But still, api-useradmin-user-list is the capability he was looking for J

bye

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320 tel:%2B43-463-208501-320

Telefax: +43-463-208501-500 tel:%2B43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Learmonth, Peter [mailto:Peter.Learmonth@netapp.com] Gesendet: Mittwoch, 30. Mai 2012 21:24 An: Alexander Griesser; Carl Howell Cc: toasters@teaparty.net Betreff: RE: VSC Privilege

Vaughn's blogs are good stuff, but that one is a little dated. I suggest the KB articles specific to VSC RBAC which are maintained by Gabe Lowe, one of our support guys who lives this stuff every day! https://kb.netapp.com/support/index?page=content&id=1012974 (VSC 2.1)

https://kb.netapp.com/support/index?page=content&id=1012973 (VSC 2.0)

The KBs also cross reference for different versions of VSC.

Share and enjoy!

Peter

From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Alexander Griesser Sent: Wednesday, May 30, 2012 10:59 AM To: Carl Howell Cc: toasters@teaparty.net Subject: AW: VSC Privilege

Which OnTap version are you using?

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320 tel:%2B43-463-208501-320

Telefax: +43-463-208501-500 tel:%2B43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Carl Howell [mailto:chowell@uwf.edu] Gesendet: Mittwoch, 30. Mai 2012 19:50 An: Alexander Griesser Cc: toasters@teaparty.net Betreff: Re: VSC Privilege

useradmin-user-list? That's what I said. The other privileges are already covered...

--Carl

On Wed, May 30, 2012 at 12:22 PM, Alexander Griesser ag@anexia.at wrote:

Useradmin-user-list? J

You will also need other privileges, I suggest you create a new role as outlined here:

https://communities.netapp.com/community/netapp-blogs/virtualstorageguy/blog...

bye,

Alexander Griesser

System-Administrator

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-463-208501-320 tel:%2B43-463-208501-320

Telefax: +43-463-208501-500 tel:%2B43-463-208501-500

E-Mail: ag@anexia.at

Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt

Geschäftsführer: Alexander Windbichler

Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Carl Howell Gesendet: Mittwoch, 30. Mai 2012 18:03 An: toasters@teaparty.net Betreff: VSC Privilege

I'm trying to get the Virtual Storage Console working using a domain account. Every time I try to log in, it gives me "In order to determine which controller privileges are allowed for this username, the following controller privilege is required: useradmin-user-list"

The domain user account I'm using is a member of a group on the filers that has a role with login-*, api-*, and cli-* capabilities. What am I missing?

Thanks,

Carl