What are the necessary role attributes for specific tasks by using System Manager?
Applies to
- ONTAP 9
- System Manager
Answer
- Specific tasks required by System Manager:
- Sign in
- Create/delete Qtrees
- Create snapshots
- Perform Snapshot restore
- Necessary role attributes set on System Manager as below (Cluster->Settings->Users and roles)


- Then need to add a user with the above role

Note: There is no specific REST API for snapshot restore, it needs to grant the role /api/storage/volumes privilege.
cluster1::> security login rest-role show -role testrole
Role Access
Vserver Name API Level
---------- ------------- ------------------- ------
cluster1 testrole /api readonly
/api/storage/qtrees read_create_modify
/api/storage/volumes
all
"/api/storage/volumes/*/snapshots"
read_create_modify
4 entries were displayed.
