Prerequisites

Home  Previous  Next

User Privileges

7-Mode

To monitor a NetApp storage system in 7-mode, you need to:

Create a user with read-only access to the DATA ONTAP API
Enable TLS on NetAPP

Creating a user with read-only access to the DATA ONTAP API

Copy-paste the following command lines into the NetApp CLI:

1.Create a new role to access the Data ONTAP API used by TrueSight Operations Management - NetApp Storage:

> useradmin role add newrole -a login-http-admin,api-license-list-info,api-system-get-version,api-perf-object-get-instances,api-aggr-list-info,api-volume-list-info,api-lun-list-info,api-lun-map-list-info,api-qtree-list,api-system-get-info,api-storage-adapter-get-adapter-list,api-storage-adapter-get-adapter-info,api-net-config-get-active,api-fcp-adapter-list-info,api-fcp-adapter-stats-list-info,api-cifs-list-config,api-iscsi-service-status,api-iscsi-adapter-list-info,api-nfs-status,api-sis-status,api-snapmirror-get-status,api-snapvault-primary-destinations-list-info,api-storage-shelf-list-info,api-disk-list-info,api-storage-shelf-environment-list-info,api-vfiler-list-info,api-cifs-status,api-vfiler-get-status,api-snapvault-primary-get-relationship-status,api-quota-report,api-snapshot-volume-info,api-volume-autosize-get

 

2.Create a new group using the previously created role:

> useradmin group add newgroup -c "adding group for newuser" -r newrole

 

3.Create a new user in the previously created group:

> useradmin user add newuser -g newgroup

 

Enabling TLS on NetApp (7-Mode only)

Data ONTAP supports SSLv3 and TLS (disabled by default) to secure its  connection with TrueSight Operations Management - NetApp Storage. When using Java 1.8, which no longer uses SSLv3 but TLS, TrueSight Operations Management - NetApp Storage cannot connect to Data ONTAP. To guarantee the correct operation of TrueSight Operations Management - NetApp Storage,  you will have to first enable TLS. For more information, please refer to the NetApp documentation.

C-Mode:

To monitor a NetApp storage system in C-Mode, you need to create a user with read-only access to the Data ONTAP API.

When using Data ONTAP v7.x and 8.x

Copy-paste the following command lines into the NetApp CLI:

>::security >login create -username newuser -application http -authmethod password -role readonly

>::security >login create -username newuser -application ontapi -authmethod password -role readonly

 

When using Data ONTAP v9

Copy-paste the following command lines into the NetApp CLI:

security login create -user-or-group-name tsco -application ontapi -authentication-method password -role readonly

security login create -user-or-group-name tsco -application http -authentication-method password -role readonly

or add a user in NetApp OnCommand System Manager with the following login methods:

Add User - NetApp OnCommand System Manager

Other Components

Java 1.8 or higher