Skip to main content
SnapCenter software
简体中文版经机器翻译而成，仅供参考。如与英语版出现任何冲突，应以英语版为准。

为ASA r2 系统创建 SVM 角色

PDF

您必须运行几个ONTAP CLI 命令才能在ASA r2 系统中为新的 SVM 用户创建角色。如果您在ASA r2 系统中配置 SVM 以与SnapCenter一起使用并且不想使用 vsadmin 角色，则需要此角色。

步骤

  1. 在存储系统上创建一个角色，并为该角色赋予所有权限。

    security login role create –vserver <svm_name\>- role <SVM_Role_Name\> -cmddirname <permission\>

    备注 您应该对每个权限重复此命令。

  2. 创建一个用户并将角色分配给该用户。

    security login create -user <user_name\> -vserver <svm_name\> -application http -authmethod password -role <SVM_Role_Name\>

  3. 解除用户锁定。

    security login unlock -user <user_name\> -vserver <svm_name\>

用于创建 SVM 角色和分配权限的ONTAP CLI 命令

您应该运行几个ONTAP CLI 命令来创建 SVM 角色并分配权限。

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "snapmirror list-destinations" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "event generate-autosupport-log" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "job history show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "job show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "job stop" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "lun" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun igroup add" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun igroup create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun igroup delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun igroup rename" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun igroup show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun mapping add-reporting-nodes" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "lun mapping create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun mapping delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun mapping remove-reporting-nodes" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun mapping show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun modify" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun move-in-volume" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun offline" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun online" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun resize" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun serial" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "lun show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "network interface" -access readonly

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror policy add-rule" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror policy modify-rule" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror policy remove-rule" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror policy show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror restore" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "snapmirror show-history" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror update" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "snapmirror update-ls-set" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "version" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume clone create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume clone show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume clone split start" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume clone split stop" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume destroy" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume file clone create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume file show-disk-usage" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume modify" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume offline" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume online" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume qtree create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume qtree delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume qtree modify" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume qtree show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume restrict" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot modify" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "volume snapshot modify-snaplock-expiry-time" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot rename" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot restore" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot restore-file" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot show-delta" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume unmount" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver cifs share create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver cifs share delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver cifs share show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver cifs show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy delete" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy rule create" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy rule show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "vserver iscsi connection show" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver" -access readonly

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver export-policy" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "vserver iscsi" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "volume clone split status" -access all

  • security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume managed-feature" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem map" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem create" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem delete" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem modify" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem host" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem controller" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme subsystem show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme namespace create" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme namespace delete" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme namespace modify" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "nvme namespace show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "storage-unit show" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "consistency-group" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "snapmirror protect" -access all

  • security login role create -vserver SVM_Name -role SVM_Role_Name -cmddirname "volume delete" -access all

  • security login create -user-or-group-name user_name -application http -authentication-method password -role SVM_Role_Name -vserver SVM_Name

  • security login create -user-or-group-name user_name -application ssh -authentication-method password -role SVM_Role_Name -vserver SVM_Name