Skip to main content
ONTAP tools for VMware vSphere 9.12
A newer release of this product is available.

Guidelines for using ONTAP tools standard roles

Contributors
PDFs

When you work with standard ONTAP® tools for VMware vSphere roles, there are certain guidelines you should follow.

You should not directly modify the standard roles. If you do, ONTAP tools will overwrite your changes each time you upgrade ONTAP tools. The installer updates the standard role definitions each time you upgrade ONTAP tools. Doing this ensures that the roles are current for your version of ONTAP tools as well as for all supported versions of the vCenter Server.

You can, however, use the standard roles to create roles that are tailored to your environment. To do this, you should copy the ONTAP tools standard role and then edit the copied role. By creating a new role, you can maintain this role even when you restart or upgrade the ONTAP tools Windows service.

Some of the ways that you might use the ONTAP tools standard roles include the following:

  • Use the standard ONTAP tools roles for all ONTAP tools tasks.

    In this scenario, the standard roles provide all the privileges a user needs to perform the ONTAP tools tasks.

  • Combine roles to expand the tasks a user can perform.

    If the standard ONTAP tools roles provide too much granularity for your environment, you can expand the roles by creating higher-level groups that contain multiple roles.

    If a user needs to perform other, non-ONTAP tools tasks that require additional native vCenter Server privileges, you can create a role that provides those privileges and add it to the group also.

  • Create more fine-grained roles.

    If your company requires that you implement roles that are more restrictive than the standard ONTAP tools roles, you can use the ONTAP tools roles to create new roles.

    In this case, you would clone the necessary ONTAP tools roles and then edit the cloned role so that it has only the privileges your user requires.