You can use these operations in the AccessControl.xml file to allow or restrict access to users depending on their assigned roles.
You can use these operations with the default roles provided in the AccessContol.xml file, or you can create new roles using one or more of the available operations.
| Operation | Descriptions |
|---|---|
| SD.Config | Allows users to perform all configuration operations. |
| SD.Config.Read | Allows users to perform only read rights of configuration information on the storage system. |
| SD.Config.Write: | Allows users to create and modify configuration information on the storage system. For example, a user is allowed to create and modify iGroups, create mappings, and set options on the storage system. |
| SD.Config.Delete | Allows users to delete any configuration information. |
| SD.Storage: | Allows users to perform all storage operations. |
| SD.Storage.Read: | Allows users to list storage system objects. For example, a user can enumerate and read aggregates, volumes, qtrees, LUNs, and files. |
| SD.Storage.Write: | Allows users to create and modify storage system objects. |
| SD.Storage.Delete: | Allows users to delete storage objects. |
| SD.Snapshot: | Allows users to perform all Snapshot copy operations. |
| SD.Snapshot.Read | Allows users list Snapshot copies, including archived copies, and objects inside the Snapshot copies. |
| SD.Snapshot.Delete | Allows users to delete Snapshot copies. |
| SD.Snapshot.Write: | Allows users to create, rename and modify Snapshot copies. |
| SD.Snapshot.Restore | Allows users to restore from a Snapshot copy. |
| SD.Snapshot.Clone | Allows users to clone-related operations such as FlexClone volume operations and LUN clone operations. |
| SD.Access.None | Denies all access to a storage system. |