跳转到主内容

哪些文档可以帮助设置基于RBAC的策略和管理员

  1. 最后更新
  2. 另存为PDF
Views:
61
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
CORE
Last Updated:

适用场景

  • ONTAP 9
  • 基于角色的访问控制 (RBAC)
  • 导出策略

问题解答

1.  指定命令目录并设置适当的访问级别：

示例：

cluster::> securitylogin role create -role admin_role -cmddirname DEFAULT -access none -vserversvm1
cluster::> security login role create -role admin_role -cmddirname"vserver" -access all -vserver svm1
cluster::> security login role create -role admin_role -cmddirname"network" -access all -vserver svm1
cluster::> security login role create -role admin_role -cmddirname"system" -access all -vserver svm1
cluster::> security login role create -role admin_role -cmddirname"cluster" -access all -vserver svm1

  • 要限制对数据的访问、您可能需要拒绝对 卷、 文件和 快照等数据相关命令目录的访问。

示例：
cluster::> securitylogin role create -role admin_role -cmddirname "volume" -access none-vserver svm1
cluster::> security login role create -role admin_role -cmddirname"file" -access none -vserver svm1
cluster::> security login role create -role admin_role -cmddirname"snapshot" -access none -vserver svm1

  1. 创建自定义角色后、 创建一个用户并将该角色分配给该用户：

通过列出角色并检查访问级别、确保已正确配置角色和用户：

示例：

cluster::> securitylogin role show -vserver svm1 -role admin_role

cluster::> security login show -vserver svm1 -user-or-group-name admin_user

追加信息

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.