Veritas Information Map Installation and Administration Guide
- Introduction to Veritas Information Map
- Planning installation of the Information Map Agent
- Installing and configuring Information Map
- Installing the Information Map Agent
- Configuring credentials for share discovery and native scanning
- Cloud Agent configuration
- Global settings
- Managing Information Map settings
- Troubleshooting
Configuring a non-administrator domain user on NetApp 7-mode filer
The section describes how you can configure a domain user account that you can use to configure a task in Information Map.
To add a task in Information Map, you can use an account which is not in the administrators group on the NetApp filer, but has some specific privileges.
Perform the following steps on the NetApp filer console to add a non-administrator user, for example, testuser.
To create a non-administrator user
- Create a new role, for example NBUCollectorRole, using the
useradmin
utility on the filer. - Add the login-* and API-* capabilities to the role.
For example, useradmin role add IMAgentRole -a login-*,api-*.
You can also choose to assign specific capabilities to the role.
Table: Additional capabilities for adding a non-administrator user account provides a detailed description of each capability.
- Create a new group, for example, testgroup and apply the role testrole to it.
For example, useradmin group add testgroup -r testrole.
- Add the user testdomain\testuser to testgroup
For example, useradmin domainuser add testdomain\testuser -g testgroup.
- Add the user testdomain\testuser to Backup Operators group.
For example, useradmin domainuser add testdomain\testuser -g Backup Operators.
Note:
For vfilers, append the above command-line examples with vfiler run <vfilername>.
Table: Additional capabilities for adding a non-administrator user account
Capability | Description |
---|---|
login-http-admin | Enables the non-administrator user to log into the NetApp filer and run commands. With this capability, you can get latency statistics (for scan throttling), volume size information, or discover shares. |
api-system-get-ontapi-version api-system-get-version | Enables you to get the ONTAPI version number and the system version number respectively. These are required to set the login handle context properly. Information Map reports a failure when you test the connection to the filer, if these capabilities are absent. Also, if these capabilities are absent, you cannot execute any APIs including those required to discover shares, and get latency statistics. |
api-cifs-share-list-iter-start api-cifs-share-list-iter-next api-cifs-share-list-iter-end | Used to discover shares on the NetApp filer. Absence of these capabilities can result in a failure to discover the shares. |
api-volume-list-info | Used to periodically fetch size information for NetApp volumes. |
api-nfs-exportnfs-list-rules api-nfs-exportnfs-list-rules-2 | Used to discover all NFS shares that are exported from the NetApp filer. If this capability is absent, these NFS shares are not discovered. |
api-system-get-info | Used to discover the NetApp system serial number. The information is used by external reporting tools to report about the NetApp filers that Information Map monitors. |