Predefined roles for SVM administrators

The five predefined roles for an SVM administrator are: vsadmin, vsadmin-volume, vsadmin-protocol, vsadmin-backup, and vsadmin-readonly. In addition to these predefined roles, you can create customized SVM administrator roles by assigning a set of capabilities.

Each SVM can have its own user and administration authentication domain. You can delegate the administration of an SVM to an SVM administrator after creating an SVM and user accounts.

Note: SVMs with Infinite Volume do not support quotas, qtrees, and LUNs. Therefore, an SVM administrator cannot perform the tasks related to quotas, qtrees, and LUNs on an SVM with Infinite Volume.

The following table lists the predefined roles for an SVM administrator along with the respective capabilities:

SVM Administrator Role Name

Description

vsadmin

This role is the super user role for an SVM and is assigned by default. The SVM administrator with this role has the following capabilities:

•	Managing own user account local password and key information

•	Managing volumes, quotas, qtrees, Snapshot copies, and files

•	Managing LUNs

•	Configuring protocols: NFS, CIFS, iSCSI, and FC (FCoE included)

•	Configuring services: DNS, LDAP, and NIS

•	Monitoring jobs

•	Monitoring network connections and network interface

•	Monitoring the health of an SVM

vsadmin role is assigned by default.

vsadmin-volume

The SVM administrator with this role has the following capabilities:

•	Managing own user account local password and key information

•	Managing volumes, quotas, qtrees, Snapshot copies, and files

•	Managing LUNs

•	Configuring protocols: NFS, CIFS, iSCSI, and FC (FCoE included)

•	Configuring services: DNS, LDAP, and NIS

•	Monitoring network interface

•	Monitoring the health of SVM

vsadmin-protocol

The SVM administrator with this role has the following capabilities:

•	Managing own user account local password and key information

•	Configuring protocols: NFS, CIFS, iSCSI, and FC (FCoE included)

•	Configuring services: DNS, LDAP, and NIS

•	Managing LUNs

•	Monitoring network interface

•	Monitoring the health of an SVM

vsadmin-backup

The SVM administrator with this role has the following capabilities:

•	Managing NDMP operations

•	Making a restored volume as read-write

•	Viewing volumes and LUNs

Note: SVM administrator with vsadmin-backup role cannot manage own user account local password and key information.

vsadmin-readonly

The SVM administrator with this role has the following capabilities:

•	Managing own user account local password and key information

•	Monitoring the health of an SVM

•	Monitoring network interface

•	Viewing volumes and LUNs

•	Viewing services and protocols