What are the corresponding NTFS security descriptor DACL entries between Windows, ONTAP and PST
Applies to
- ONTAP 9
- ONTAP PowerShell Toolkit (PST)
- NTFS Security Descriptor (SD) \ Discretionary Access Control List (DACL) \ Access Control List (ACL)
Answer
windows basic permissions | ontap basic rights | pst basic rights |
none | no-access | no_access |
full control | full-control | full_control |
modify | modify | modify |
read & execute | read-and-execute | read_and_execute |
list folder contents | read + read-and-execute | read + read_and_execute |
read | read | read |
write | write | write |
windows advanced permissions | ontap advanced rights | pst advanced rights |
full control | full-control | full_control |
traverse folder / execute file | execute-file | execute_file |
list folder / read data | read-data | read_data |
read attributes | read-attr | read_attr |
read extended attributes | read-ea | read_ea |
create files / write data | write-data | write_data |
create folders/ append data | append-data | append_data |
write attributes | write-attr | write_attr |
write extended attributes | write-ea | write_ea |
delete subfolders and files | delete-child | delete_child |
delete | delete | delete |
read permissions | read-perm | read_perm |
change permissions | write-perm | write_perm |
take ownership | write-owner | write_owner |
Additional Information
- ontap cli
- vserver security file-directory ntfs dacl commands
man vserver security file-directory ntfs dacl show
- powershell toolkit
get-help Add-NcFileDirectorySecurityNtfsDacl -detailed