Using storage system access control

SnapDrive uses the AccessControl.xml file on the storage system to determine what roles are assigned to a user and what operations are allowed for specific roles.

Before you begin

Download and install the storage access control (storacl.exe) tool from the ToolChest section on the NOW site at http://now.netapp.com/ to any Windows host to create and manage the AccessControl.xml file on your storage system in the /etc directory of the root volume.
HTTPS must be enabled using the options ssl.enable command and secureadmin setup ssl command on the storage system.
HTTP is also supported for use with vFiler units when using the MultiStore feature of Data ONTAP software.
You must be logged in as root on the storage system.

About this task

Note: The storage system access tool provides command-line Help and usage information. You can also see the Storage Access Control User's Guide on the NOW site for more information.

Steps

Run storacl.exe from your Windows host to create a default AccessControl.xml file on the specified storage system.
An AccessControl.xml file is created containing a default set of roles and operations with no resources or access rights.
Using storacl.exe, edit the AccessControl.xml file to add or change users and to grant or deny access rights to the storage system resources. You can also use the default entries.
SnapDrive opens and reads the AccessControl.xml file and caches the information on the Windows host. SnapDrive uses this information to check resource access for all SnapDrive operations, and grants or denies access depending on the role assigned to the user.