Guidelines for reverting

Contributors

If you plan to revert the cluster to an ONTAP release that does not support local users and groups and local users and groups are being used to manage file access or user rights, you must be aware of certain considerations.

  • Due to security reasons, information about configured local users, groups, and privileges are not deleted when ONTAP is reverted to a version that does not support local users and groups functionality.

  • Upon a revert to a prior major version of ONTAP, ONTAP does not use local users and groups during authentication and credential creation.

  • Local users and groups are not removed from file and folder ACLs.

  • File access requests that depend on access being granted because of permissions granted to local users or groups are denied.

    To allow access, you must reconfigure file permissions to allow access based on domain objects instead of local user and group objects.