Using Data ONTAP commands at different privilege levels

About privilege levels

Data ONTAP provides two sets of commands, depending on the privilege level, which can be administrative or advanced. You can set the privilege level by using the priv command.

At the administrative level, you have access to commands that are sufficient for managing your storage system. At the advanced level, in addition to all the commands available at the administrative level, you have access to commands for troubleshooting. Commands accessible only at the advanced level should be used under the guidance of technical support.

Attention
Using advanced commands can be dangerous. Using some advanced commands without consulting technical support might result in data loss.

How different privilege settings apply to different sessions

Sessions opened through the console, Telnet, and secure shell applications share the same privilege setting. For example, if you set the privilege level to advanced at the console, the advanced commands also become available to an administrator who is connected to the storage system using Telnet.

You can, however, set a different privilege level for each invocation of rsh. Suppose your privilege level at the console is administrative and, through rsh, another administrator sets the privilege level to advanced. Your privilege level at the console remains unchanged.

Initial privilege level

The initial privilege level for the console and for each rsh session is administrative.

Data ONTAP resets the privilege level to administrative for each rsh session. If you have a script invoking multiple rsh connections and you want to execute advanced commands in each connection, you must set the privilege level accordingly for each rsh session. If you set the privilege level for the first rsh session only, Data ONTAP fails to execute the advanced commands through the subsequent rsh sessions, because the privilege level for each subsequent session is reset to administrative.

Setting the privilege level

To set the privilege level, complete the following step.

Step	Action
1	Enter the following command: priv set [-q] [admin \| advanced] `admin` sets the privilege level to administrative. `advanced` sets the privilege level to advanced. `-q` enables quiet mode. It suppresses the warning that normally appears when you set the privilege level to advanced. Note If no argument is given, the default, `admin`, is applied. Example Assuming the name of the storage system is sys1, the storage system prompt is `sys1>`, as shown in the following example. `sys1> priv set advanced` Result The following message is displayed, followed by the advanced mode storage system prompt. Warning: These advanced commands are potentially dangerous; use them only when directed to do so by Network Appliance personnel. sys1*>

Step

Action

Enter the following command:

priv set [-q] [admin | advanced]

admin sets the privilege level to administrative.

advanced sets the privilege level to advanced.

-q enables quiet mode. It suppresses the warning that normally appears when you set the privilege level to advanced.

Note
If no argument is given, the default, admin, is applied.

Example

Assuming the name of the storage system is sys1, the storage system prompt is sys1>, as shown in the following example.

sys1> priv set advanced

Result

The following message is displayed, followed by the advanced mode storage system prompt.

Warning: These advanced commands are potentially 
dangerous; use them only when directed to do so by 
Network Appliance personnel.

sys1*>