What are the corresponding NTFS security descriptor DACL entries between Windows, ONTAP and PST
Applies to
- ONTAP 9
- ONTAP PowerShell Toolkit (PST)
- NTFS Security Descriptor (SD) \ Discretionary Access Control List (DACL) \ Access Control List (ACL)
Answer
| windows basic permissions | ontap basic rights | pst basic rights |
| none | no-access | no_access |
| full control | full-control | full_control |
| modify | modify | modify |
| read & execute | read-and-execute | read_and_execute |
| list folder contents | read + read-and-execute | read + read_and_execute |
| read | read | read |
| write | write | write |
| windows advanced permissions | ontap advanced rights | pst advanced rights |
| full control | full-control | full_control |
| traverse folder / execute file | execute-file | execute_file |
| list folder / read data | read-data | read_data |
| read attributes | read-attr | read_attr |
| read extended attributes | read-ea | read_ea |
| create files / write data | write-data | write_data |
| create folders/ append data | append-data | append_data |
| write attributes | write-attr | write_attr |
| write extended attributes | write-ea | write_ea |
| delete subfolders and files | delete-child | delete_child |
| delete | delete | delete |
| read permissions | read-perm | read_perm |
| change permissions | write-perm | write_perm |
| take ownership | write-owner | write_owner |
Additional Information
- ontap cli
- vserver security file-directory ntfs dacl commands
man vserver security file-directory ntfs dacl show
- powershell toolkit
get-help Add-NcFileDirectorySecurityNtfsDacl -detailed