Sun Storage 7000 Unified Storage System: Unable to create a "Read Only" role.

Asset ID:	1-71-1541562.1
Update Date:	2017-10-05
Keywords:

Solution Type Technical Instruction Sure

Solution 1541562.1 : Sun Storage 7000 Unified Storage System: Unable to create a "Read Only" role.

Applies to:

Sun ZFS Storage 7420 - Version All Versions and later
Sun ZFS Storage 7320 - Version All Versions and later
Sun ZFS Storage 7120 - Version All Versions and later
Sun Storage 7410 Unified Storage System - Version All Versions and later
Sun Storage 7310 Unified Storage System - Version All Versions and later
Information in this document applies to any platform.

Goal

There may be requirement where you don't want to give all administrative rights to a user and just want to give specific permission.
This can be achieved using roles.

But there may be situations where you want a user to give just Read Only permissions.
In other words you may wish wish a user to just monitor and check the status but should not be able to modify anything.

Solution

Roles are a group of permissions that can be assigned to a user selectively.

On the other hand, Exceptions are granular permissions that can be assigned to users that are not part of a Role.

Go to Configuration > Users

1. Created a user "testuser". Do Not select any roles or Exceptions.
2. Logged in with user testuser
3. Tried creating a share.. It failed with error:
> "You are not authorized to perform this action"
4. Tried restarting a service:
Got same authorization error.

So we have successfully created a Read Only role and assigned to a user.

Also read this document 1545961.1 for more details on Roles and Exceptions.

References

<NOTE:1545961.1> - Sun Storage 7000 Unified Storage System: Roles and Exceptions

Attachments

This solution has no attachment