search

NetAppDocs / snapcenter

https://docs.netapp.com/us-en/snapcenter/
4 stars 5 forks source link

SnapCenter 5.0 Documentation Issue - Minimum Privileges (SVM) #126

Closed dburkland closed 3 months ago

dburkland commented 4 months ago

Page URL

https://docs.netapp.com/us-en/snapcenter/install/create-svm-roles-minimum-privileges.html

Page title

Create SVM roles with minimum privileges

Summary

Page URL

https://docs.netapp.com/us-en/snapcenter/install/task_create_an_ontap_cluster_role_with_minimum_privileges.html

Page title

Create ONTAP cluster roles with minimum privileges

Summary

If I follow this documentation I am able to create backups of SAP HANA SIDs however I am NOT able to cleanly delete backups. I receive the following error message upon triggering the deletion:

SC_Error

The snapshots are properly pruned on the appropriate NetApp cluster however I have to re-run the deletion task in SnapCenter to remove the backup from the SnapCenter catalog. Upon googling this issue, I found the following KB article which describes how to force SnapCenter to use ZAPI:

https://kb.netapp.com/data-mgmt/SnapCenter/SC_KBs/Replication_error_where_SC_5.0_is_unable_to_find_the_source_snapshot

Considering ZAPI is now being phased out and also the scale of this deployment, I did some additional troubleshooting to find a cleaner solution. I was able to discover that after adding the following commands to the custom snapcenter role in ONTAP, SnapCenter backup AND deletion operations were able to complete successfully:

security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "volume snapshot show-delta" -access all

security login role create -vserver SVM_name -role SVM_Role_Name -cmddirname "job show" -access all

Please update this documentation to include the aforementioned commands.

Thanks!

Dan

Public issues must not contain sensitive information

Public issues must not contain sensitive information

netapp-soumikd commented 3 months ago

Thank you for contacting us with your feedback. After discussing with Engineering, we will determine how best to address it and update the content at the earliest.

netapp-soumikd commented 3 months ago

Discussed with Engineering and have documented the new permissions here: https://docs.netapp.com/us-en/snapcenter/install/create-svm-roles-minimum-privileges.html