|
|
 Data ONTAP® PowerShell Toolkit
|
Cmdlet: New-NcRole
NAME
New-NcRole
SYNOPSIS
Create a new user role.
SYNTAX
New-NcRole [-Role] <String> -Vserver <String[]> -CommandDirectory <String[]>
[-AccessLevel <String>] [-RoleQuery <String>] [-Controller <NcController[]>
] [<CommonParameters>]
DESCRIPTION
Create a new user role.
PARAMETERS
-Role <String>
Name of the new role.
Required? true
Position? 1
Default value
Accept pipeline input? true (ByPropertyName)
Accept wildcard characters? false
-Vserver <String[]>
Vserver that will own the new role.
Required? true
Position? named
Default value
Accept pipeline input? true (ByPropertyName)
Accept wildcard characters? false
-CommandDirectory <String[]>
The command or command directory to which the role has an access.
Required? true
Position? named
Default value
Accept pipeline input? true (ByPropertyName)
Accept wildcard characters? false
-AccessLevel <String>
Access level for the role. Possible values: 'none', 'readonly', 'all'.
The default value is 'all'.
Required? false
Position? named
Default value all
Accept pipeline input? true (ByPropertyName)
Accept wildcard characters? false
-RoleQuery <String>
A query for the role. The query must apply to the specified command or
directory name.
Example: The command is 'volume show' and the query is '-volume vol1'.
The query is applied to the command resulting in populating only the vol
umes with name vol1.
Required? false
Position? named
Default value
Accept pipeline input? true (ByPropertyName)
Accept wildcard characters? false
-Controller <NcController[]>
A clustered Data ONTAP controller to receive this cmdlet, as embodied by
an NcController object. This parameter is returned by the Connect-NcCo
ntroller cmdlet. If not specified, the value in the global variable Cur
rentNcController is used. In the latter case, if CurrentNcController co
ntains a collection of NcController objects, this cmdlet is invoked on e
ach controller in succession.
Required? false
Position? named
Default value
Accept pipeline input? true (ByValue, ByPropertyName)
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer and OutVariable. For more information, type,
"get-help about_commonparameters".
INPUTS
OUTPUTS
DataONTAP.C.Types.Security.SecurityLoginRoleInfo
NOTES
Category: security
API: security-login-role-create
Family: cluster
-------------- Example 1 --------------
C:\PS>Get-NcRole kamino -Vserver costea01 | New-NcRole -Vserver costea02
Copy the role definitions from vserver 'costea01' to vserver 'costea02'.
RoleName Vserver AccessLevel CommandDirectoryName
-------- ------- ----------- --------------------
kamino costea02 all dashboard health vserver
kamino costea02 all job
kamino costea02 all job schedule
kamino costea02 all lun
kamino costea02 all network
kamino costea02 all network connections
kamino costea02 none network connections active show-clients
kamino costea02 none network connections active show-protocols
kamino costea02 none network connections active show-services
kamino costea02 all network interface
kamino costea02 none network interface failover-groups
kamino costea02 all network routing-groups
kamino costea02 all security
kamino costea02 all security login password
kamino costea02 all security login publickey
kamino costea02 all security login role show-ontapi
kamino costea02 all set
kamino costea02 all version
kamino costea02 all volume
kamino costea02 all volume efficiency
kamino costea02 all volume move
kamino costea02 all vserver
kamino costea02 all vserver cifs
kamino costea02 all vserver export-policy
kamino costea02 all vserver fcp
kamino costea02 all vserver iscsi
kamino costea02 all vserver locks
kamino costea02 all vserver name-mapping
kamino costea02 all vserver nfs
kamino costea02 all vserver services
kamino costea02 none vserver services kerberos-realm
kamino costea02 all vserver services ldap client
kamino costea02 none vserver services web
-------------- Example 2 --------------
C:\PS>New-NcRole kamino -Vserver costea01 -AccessLevel readonly -CommandDire
ctory "volume clone"
Add "volume clone" read-only access to role 'kamino' on vserver 'costea01'.
-------------- Example 3 --------------
C:\PS>New-NcRole kamino -Vserver costea01,costea02 -AccessLevel all -Command
Directory "volume clone","volume member"
Add permissions for 'volume clone' and 'volume member' commands to the 'kami
no' role on vservers 'costea01' and 'costea02'.
RoleName Vserver AccessLevel CommandDirectoryName
-------- ------- ----------- --------------------
kamino costea01 all volume clone
kamino costea01 all volume member
kamino costea02 all volume clone
kamino costea02 all volume member
RELATED LINKS
Get-NcRole
Remove-NcRole
Set-NcRole
| Copyright © 2013 NetApp. All rights reserved. Use is subject to license terms. |
|
Data ONTAP® PowerShell Toolkit
|