To enable RBAC to work between SnapDrive for Windows and DataFabric Manager server, the DataFabric Manager server must be configured with predefined SnapDrive roles, capabilities and operations.
| SnapDrive operation | Role and capability | Description |
|---|---|---|
| disk create | SD.Storage.Write | Enables LUN creation when set at the volume or qtree resource |
| disk expand | SD.Storage.Write | Enables LUN expansion when set at the disk resource |
| disk delete | SD.Storage.Delete | Enables LUN deletion when set at the disk resource |
disk connect disk disconnect disk disconnect -f |
SD.Storage.Write | Enables LUN connect, disconnect, and forced disconnect when set at the disk resource |
| disk list | SD.Storage.Read | Enables the ability to list all disks on a volume when set at the storage system volume resource |
| snap list | SD.Snapshot.Read | Enables the ability to list all Snapshot copies when set on a storage system volume resource |
| snap create | SD.Snapshot.Write | Enables Snapshot copy creation when set on a storage system volume resource |
| snap restore | SD.Snapshot.Restore | Enables Snapshot copy restoration when set on a storage system volume resource |
| snap delete | SD.Snapshot.Delete | Enables Snapshot copy deletion when set on volume when set at the storage system volume resource |
| snap rename | SD.Snapshot.Write | Enables Snapshot copy renaming on a volume when set at the storage system volume resource |
| snapvault archive | SD.Snapshot.Write | Enables SnapVault archiving when set on a secondary SnapVault volume resource |
| snapvault snapshot_delete | SD.Snapshot.Delete | Enables deletion of SnapVault Snapshot copies when set on a secondary SnapVault volume resource |
| snapvault snap_list | SD.Snapshot.Read | Enables the ability to list SnapVault Snapshot copies when set on a secondary SnapVault volume resource |
| Snapvault verify_configuration | SD.Snapshot.Read | Enables SnapVault configuration verification when set on primary and secondary SnapVault volumes resource |
| snapvault rename | SD.Snapshot.Write | Enables renaming of SnapVault Snapshot copies when set on the secondary SnapVault volume resource |
| igroup create | SD.Config.Write | Enables initiator group creation when enables on the storage system resource |
| igroup rename | SD.Config.Write | Enables renaming of initiator groups when set on the storage system resource |
| igroup delete | SD.Config.Delete | Enables deletion of initiator groups when set on the storage system resource |
| igroup list | SD.Config.Read | Enables the ability to list initiator groups when set on the storage system resource |
| snap mount | Set on the volume for LUN clones:SD.Snapshot.Clone Set on the qtree for LUN clones:SD.Snapshot.Clone Set on the storage system for traditional volume clones:SD.Snapshot.Clone Set on the parent volume for flexible volume clones:SD.Snapshot.Clone Set on the parent for flexible volume clones that are split:SD.Snapshot.Clone SD.Storage.Write |
Enables Snapshot copy mounting when set on the specified resources |
| snapshot unmount | For LUN clones in a volume or qtree:SD.Snapshot.Clone on the volume For volume clones:SD.Snapshot.Clone on the parent volume |
Enables unmounting of LUN clones or volume clones on the indicated resources |
| volume create | SD.Storage.Write | Enables volume creation when set on the aggregate resource |
| volume rename | SD.Storage.Write | Enables renaming of a volume when set on the volume resource |
| volume delete | SD.Storage.Delete | Enables deletion of a volume when set on the volume resource |
| volume list | SD.Storage.Read | Enables the ability to list volumes on a storage system aggregate when set on an aggregate resource |
| aggregate list | SD.Storage.Read | Enables the ability to list aggregates when set on the storage system resource |