Do local authentication objects and permissions need to be recreated after a SnapMirror break?

• ONTAP 9
• SnapMirror
• SVM DR

• Yes. When a volume or SVM is replicated using SnapMirror to a different SVM, any local users, local groups, and related access control entries (ACEs) will not function on the destination SVM after the SnapMirror break.
• Permissions for local objects are valid only within the SVM where they were originally created and do not carry over to a different local domain. 
• Required Actions on the Destination SVM:

1. Enable Local Authentication:

set adv
vserver cifs options modify -vserver <SVM name> -is-local-auth-enabled true

2. Recreate Required Local Users. Example: <SVM name>\Administrator (Ensure password is set.)
3. Reconfigure Share Access Controls:

• Use share access-control create command to add the required local users/groups.
• Reapply folder/file ACLs from the client side (Windows Explorer or via scripts).

4. Verify Access From Non-Domain Clients
5.  Test using net use or preferred methods for connecting from workgroup PCs.

additionalInformation_text