跳转到主内容

What are the required capabilities for SnapDrive for Windows service account?

Views:
7
Visibility:
Public
Votes:
0
Category:
snapdrive-for-windows
Specialty:
snapx
Last Updated:

Applies to

SnapDrive for Windows

Answer

In certain environments, it is not acceptable to add the SnapDrive service account to the local administrators group on the storage controllers.

Complete the following steps to create a storage controller group with the appropriate capabilities for a SnapDrive service account.

  1. Create the SnapDrive Service Account (such as 'snapdrive') in an Active Directory Domain.

  2. Create a new local storage controller group (such as 'sdadmin'):
    useradmin group add sdadmin

  3. Create a new role with the appropriate capabilities on the storage controller (such as 'snapdrive'):
    useradmin role add snapdrive -a login-http-admin,
    api-lun-*,api-snapshot-*,api-iscsi-*,api-volume-*,api-snapmirror-*,api-snapvault-*,api-ems-*,api-igroup-*,api-qtree-*,api-fcp-adapter-*,api-license-*,api-system-*,api-aggr-*,api-file-*

  4. Assign the new role to the newly created group:
    useradmin group modify sdadmin -r snapdrive

  5. Add the 'snapdrive' user to the 'sdadmin' group:
    useradmin domainuser add snapdrive -g sdadmin

  6. Add the 'snapdrive' user to the Windows server local Administrators group.

  7. Install or modify SnapDrive to use the 'snapdrive' service account with its services.

  8. Test SnapDrive (example, create/delete snapshot, connect and disconnect snapshot, create/delete a LUN, resize a LUN).

If there are other NetApp applications running on the server (such as SnapManager for Exchange/SQL), test those applications as well.

Additional Information

additionalInformation_text