Creating a CIFS Superuser
Prev File Access Tasks Next

Creating a CIFS Superuser

Most file systems include a superuser account. Such an account enables system administrators to modify files and their attributes without reference to the usual file permission system. This facility is needed for many management tasks including software installation, recovery from user error (for example, errors resulting in users locking themselves out of their files), and retrieval of files owned by deleted users.

In the Data ONTAP 10.0 system, the granting of superuser privilege is based on the user, not on group membership.

Because each virtual server has an independent user namespace, the privileged superuser and host lists are qualified by the virtual server. This enables the administrator to delegate superuser responsibilities at the virtual-server level.

To create a CIFS superuser, use the protocol cifs superuser new command, and specify a virtual server, a CIFS domain, and an account that is to be granted superuser access. The following example gives CIFS superuser permissions to a user account named rex on a CIFS domain named ENG and a CIFS-enabled virtual server named vs0.

node::> protocol cifs superuser new -vserver vs0 -domain ENG
-accountname rex

Displaying Information about CIFS Superusers

By default, the protocol cifs superuser show command displays the following information:

  • Virtual server name

  • Virtual server's NetBIOS name

  • CIFS domain name

  • Name of account with superuser permissions

Other information is displayed in a detailed view and if other parameters are specified. See the reference page for the command for details.

The following example displays information about all CIFS superuser accounts:

node::> protocol cifs superuser show
Virtual          CIFS          Domain               Account
Server           Server        Name                 Name
vs0              WIN-ENG       ENG                  jane
vs0              WIN-ENG       ENG                  rex
vs1              WINDATA       WIN                  jeffk

Deleting CIFS Superuser Permissions from an Account

To remove CIFS superuser permissions from a CIFS account, use the protocol cifs superuser delete. The command does not delete the account itself, just its superuser access to the specified virtual server and CIFS domain.

The following example removes superuser permissions from a CIFS account named jane on a CIFS-enabled virtual server named vs0 and a CIFS domain named ENG.

node::> protocol cifs superuser delete -vserver vs0 -domain ENG
-accountname jane
Prev Up Next
Creating a CIFS Share Home Creating a Name Mapping