Preparation for Scanning NetApp Data ONTAP 7-Mode
StorageGuard collects configuration data from NetApp storage systems (7-mode) by connecting them using HTTP or HTTPS and issuing read-only commands using the NetApp ZAPI API.
The following table lists the requirements for scanning ONTAP 7-Mode systems:
| # | Description |
| 1 | Provide the Network Name or IP address of each NetApp system. |
| 2 | Provide a user account (and password) for each NetApp system. |
| 3 | The user account should be assigned with an unlimited read-only role. Examples of (read-only) API calls used:
|
| 4 | Verify that IP connectivity through HTTP (default is port 80) or HTTPS (default is port 443) is available between the StorageGuard server and each NetApp system. |
Creating a User Account for Scanning NetApp Data ONTAP 7-Mode
The following suggested method can be used to create a user account with appropriate privileges:
Option 1:
useradmin role add cntsw -a login-http-admin,api-*,cli-rdfile
Option 2:
useradmin role add cntsw -a login-http-admin,api-aggr-list-info,api-system-get-info,api-system-get-version,api-system-cli,api-license-v2-list-info,api-net-ifconfig-get,api-clock-get-clock,api-license-list-info,api-useradmin-domainuser-list,api-useradmin-group-list,api-options-list-info,api-vfiler-list-info,api-aggr-list-info,api-volume-list-info,api-qtree-list,api-snapshot-list-info,api-lun-list-info,api-igroup-list-info,api-iscsi-node-get-name,api-lun-map-list-info,api-net-iconfig-get,api-nfs-exportfs-list-rules,api-nfs-exportfs-list-rules-2,api-useradmin-role-list,api-cifs-share-list-iter,api-cifs-share-list-iter-start,api-cifs-share-list-iter-next,api-cifs-share-list-iter-end,api-snapmirror-get-status,api-snapvault-primary-relationship-status-list-iter,api-snapvault-primary-relationship-status-list-iter-start,api-snapvault-primary-relationship-status-list-iter-next,api-snapvault-primary-relationship-status-list-iter-end,api-disk-list-info,api-net-resolve,api-volume-get-root-name,api-storage-adapter-get-adapter-info,api-storage-adapter-get-adapter-list,api-useradmin-domainuser-list,api-useradmin-group-list,api-options-list-info,api-useradmin-group-list,api-useradmin-role-list,api-useradmin-domainuser-list,api-cifs-share-acl-list-iter,api-file-read-file,cli-rdfile
-------------
Create a new group:
useradmin group add cntgrp -r cntsw
Create a new user:
useradmin user add cntuser -g cntgrp
Comments
0 comments
Please sign in to leave a comment.