Delegating authority to run the volume move command

You can use the volume move command to encrypt an existing volume, move an encrypted volume, or unencrypt a volume. Cluster administrators can run volume move command themselves, or they can delegate the authority to run the command to SVM administrators.

About this task

By default, SVM administrators are assigned the vsadmin role, which does not include the authority to move volumes. You must assign the vsadmin-volume role to SVM administrators to enable them to run the volume move command.

Procedure

Delegate authority to run the volume move command: security login modify -vserver SVM_name -user-or-group-name user_or_group_name -application application -authmethod authentication_method -role vsadmin-volume
For complete command syntax, see the man page for the command.

The following command grants the SVM administrator authority to run the volume move command.

cluster1::>security login modify -vserver engData -user-or-group-name SVM-admin -application ssh -authmethod domain -role vsadmin-volume