You can create local Windows groups that can be used for authorizing access to data contained in the Storage Virtual Machine (SVM) over an SMB connection by using System Manager. You can also assign privileges that define the user rights or capabilities that a member of the group has when performing administrative activities.
Before you begin
CIFS server must be configured for the SVM.
About this task
- You can specify a group name with or without the local domain name.
The local domain is the name of the CIFS server for the SVM. For example, if the CIFS server name of the SVM is "CIFS_SERVER" and you want to create an "engineering" group, you can specify either "engineering" or "CIFS_SERVER\engineering" as the group name.
The following rules apply when using a local domain as part of the group name:
- You can only specify the local domain name for the SVM to which the group is applied.
For example, if the local CIFS server name is "CIFS_SERVER", you cannot specify "CORP_SERVER\group1" as the group name.
- You cannot use "BUILTIN" as a local domain in the group name.
For example, you cannot create a group with "BUILTIN\group1" as the name.
- You cannot use an Active Directory domain as a local domain in the group name.
For example, you cannot create a group named "AD_DOM\group1", where "AD_DOM" is the name of an Active Directory domain.
- You cannot use a group name that already exists.
- The group name must meet the following requirements:
- Must not exceed 256 characters
- Must not end in a period
- Must not include commas
- Must not include any of the following printable characters: " / \ [ ] : | < > + = ; ? * @
- Must not include characters in the ASCII range 1 through 31, which are
non-printable
Steps
- Click the SVMs tab.
- Select the SVM, and then click Manage.
- Click the SVM Settings tab.
- In the Host Users and Groups pane, click Windows
- In the Groups tab, click Create.
- In the Create Group dialog box, specify a name for the group and a description that helps you identify this new group.
- Assign a set of privileges to the group.
You can select the privileges from the predefined set of supported privileges.
- Click Add to add users to this group.
- In the Add Members to Group dialog box, perform one of the following actions:
- Specify the Active Directory user or Active Directory group to be added to a particular local group.
- Select the users from the list of available local users in the SVM.
- Click OK.
- Click Create.
Result
The local Windows group is created and is listed in the Groups window.