Does NetApp Console offer a role to create and modify resources without delete rights
Applies to
- NetApp Console
- Cloud Volumes ONTAP
- NetApp Console IAM Roles
Answer
No. To manage CVO environments in BlueXP, users must be assigned one of the following platform roles:
- Organization Admin: Full permissions to create, modify, and delete systems (including CVO). Can create folders/projects, assign roles, add users, and manage credentials.
- Folder/Project Admin: Can create, modify, and delete systems within their folder/project. Can rename folders/projects and manage resources inside them. Cannot create agents or manage federations.
- Super Admin: Has full access to all Console features, including storage and data services. Inherits all Organization Admin permissions.
Additional Information
- There is currently no built-in NetApp Console IAM role that allows users to create and modify resources but restricts only deletion permission.
- All admin roles with modification capabilities also include delete privileges
Reference: BlueXP IAM Roles Documentation
