Skip to main content
SnapCenter Plug-in for VMware vSphere 5.0

How to configure ONTAP RBAC for SnapCenter Plug-in for VMware vSphere

Contributors netapp-jani netapp-madhulik
PDFs

ONTAP RBAC applies only to SnapCenter Server application-consistent (application over VMDK) jobs.

Note Beginning with SnapCenter Plug-in for VMware (SCV) 5.0, you need to add applications of type HTTP and ONTAPI as user login methods for any ONTAP users with customized role-based access to the SCV. Without access to these applications, backups will fail. You need to restart the SCV service to recognize changes to ONTAP user login methods. For information on creating or modifying login accounts, see Worksheets for administrator authentication and RBAC configuration.

You must configure ONTAP RBAC on the storage system if you want to use it with the SnapCenter VMware plug-in. From within ONTAP, you must perform the following tasks:

  • Create a single role.

    Administrator authentication and RBAC

  • Create a username and password (storage system credentials) in ONTAP for the role.

    This storage system credential is needed to allow you to configure the storage systems for the SnapCenter VMware plug-in. You do this by entering the credentials in the plug-in. Each time you log in to a storage system using these credentials, you are presented with the set of SnapCenter functions that you set up in ONTAP when you created the credentials.

You can use the administrator or root login to access all the SnapCenter tasks; however, it is a good practice to use the RBAC feature provided by ONTAP to create one or more custom accounts with limited access privileges.

For more information, see Minimum ONTAP privileges required.