Prerequisites |
![]() ![]() ![]() |
User Privileges7-ModeTo monitor a NetApp storage system in 7-mode, you need to:
Creating a user with read-only access to the DATA ONTAP APICopy-paste the following command lines into the NetApp CLI:
> useradmin role add newrole -a login-http-admin,api-license-list-info,api-system-get-version,api-perf-object-get-instances,api-aggr-list-info,api-volume-list-info,api-lun-list-info,api-lun-map-list-info,api-qtree-list,api-system-get-info,api-storage-adapter-get-adapter-list,api-storage-adapter-get-adapter-info,api-net-config-get-active,api-fcp-adapter-list-info,api-fcp-adapter-stats-list-info,api-cifs-list-config,api-iscsi-service-status,api-iscsi-adapter-list-info,api-nfs-status,api-sis-status,api-snapmirror-get-status,api-snapvault-primary-destinations-list-info,api-storage-shelf-list-info,api-disk-list-info,api-storage-shelf-environment-list-info,api-vfiler-list-info,api-cifs-status,api-vfiler-get-status,api-snapvault-primary-get-relationship-status,api-quota-report,api-snapshot-volume-info,api-volume-autosize-get
> useradmin group add newgroup -c "adding group for newuser" -r newrole
> useradmin user add newuser -g newgroup
Enabling TLS on NetApp (7-Mode only)Data ONTAP supports SSLv3 and TLS (disabled by default) to secure its connection with TrueSight Operations Management - NetApp Storage. When using Java 1.8, which no longer uses SSLv3 but TLS, TrueSight Operations Management - NetApp Storage cannot connect to Data ONTAP. To guarantee the correct operation of TrueSight Operations Management - NetApp Storage, you will have to first enable TLS. For more information, please refer to the NetApp documentation. C-Mode:To monitor a NetApp storage system in C-Mode, you need to create a user with read-only access to the Data ONTAP API. When using Data ONTAP v7.x and 8.xCopy-paste the following command lines into the NetApp CLI: >::security >login create -username newuser -application http -authmethod password -role readonly >::security >login create -username newuser -application ontapi -authmethod password -role readonly
When using Data ONTAP v9Copy-paste the following command lines into the NetApp CLI: security login create -user-or-group-name tsco -application ontapi -authentication-method password -role readonly security login create -user-or-group-name tsco -application http -authentication-method password -role readonly or add a user in NetApp OnCommand System Manager with the following login methods: Other Components
|