Assign SVM administrator access with ONTAP System Manager
Suggest changes
PDFs
Beginning with ONTAP 9.19.1, ONTAP cluster administrators can assign System Manager access to the person who manages the SVM, known as the SVM administrator.
This is particularly useful in a tenanted ONTAP environment, where the cluster administrator can provide an SVM dashboard for each tenant.
Cluster administrators can also allow their SVM administrators to create volumes.
Step 1: Prepare the management network interface for the SVM dashboard
Before you assign the SVM dashboard to your SVM administrator, make sure the SVM has a management network interface. If the SVM doesn't have a network interface, you can create one.
-
In System Manager, select Network interfaces > Overview and then select Add to create a network interface.
-
Select Storage VM management as the network interface type.
-
Specify the IP address and the Subnet mask for the SVM management network interface.
Step 2: Verify the vsadmin user account configuration
Whenever any SVM is created, ONTAP automatically creates an associated vsadmin user account. Before you assign the SVM dashboard to the administrator, ensure that the vsadmin user account has a password and is unlocked.
-
Open the System Manager dashboard as the cluster administrator.
-
Select Cluster > Storage VMs.
-
Select the SVM, select Settings and then select Security > Users and roles.
-
Next to the vsadmin user, select
and, if needed, select:-
Change password to update the vsadmin password.
-
Unlock to make sure it is usable.
-
Step 3: Allow SVM administrators to add volumes (optional)
As an ONTAP cluster administrator, if you want your SVM administrators to be able to add local volumes in their SVMs, you can grant permission.
-
Open the System Manager dashboard and sign in as the cluster administrator.
-
Under Cluster, select Storage VMs.
-
Select
for the applicable SVM. -
Select Edit.
-
Under Resource Allocation, select the Limit volume creation to preferred local tiers check box.
-
By default, all local tiers are included when you select the check box. You can remove specific tiers if necessary. If you remove all local tiers or leave the check box blank, SVM administrators cannot provision local volumes.
-
Select Save.
Step 4: Assign SVM administrator access
To assign SVM dashboard access, provide the SVM management IP address and the vsadmin password to each SVM administrator.
-
In System Manager, select Network interfaces > Overview and then select the Management network interface.
-
Select the IP address and share it, along with the vsadmin username and password with the SVM administrator.