What permissions are required to add a cluster to AIQUM?
Applies to
- Active IQ Unified Manager 9.11+ (AIQUM)
Answer
- To add an ONTAP cluster in AIQUM, you must have the user name and password to access the cluster.
- This account must have the
adminrole with Application access set depending on the AIQUM version:- For 9.11, 9.12:
ontapi,http,console. - For 9.14+ :
ontapi,http,console,amqp.
- For 9.11, 9.12:
- Please note that Domain users cannot be granted console access.
- Use CLI to add/modify clusters on AIQUM if domain users are needed.
- See adding clusters for more information.
- Use the command
security login showto display the current users plus their assigned role and application(s). - For simplicity and testing purposes use the default "admin" user seen below, this guarantees that no permission is missing:
cluster1::> security login show -user-or-group-name admin
(security login show)
Vserver: cluster1
Second
User/Group Authentication Acct Authentication
Name Application Method Role Name Locked Method
-------------- ----------- ------------- ---------------- ------ --------------
admin amqp password admin no none
admin console password admin no none
admin http password admin no none
admin ontapi password admin no none
admin service-processor
password admin no none
admin ssh password admin no none
6 entries were displayed.
