NetApp AltaVault AVA400 - Managing user permissions

NetApp AltaVault Cloud Integrated Storage Administration Guide 81
Beta Draft
Managing user permissions Configuring security settings
Managing user permissions
You can change the administrator or monitor passwords and define role-based users in the Configure > User
Permissions page.
There are two types of accounts:
 “Capability-based accounts” on page 81
 “Role-based accounts” on page 81
Capability-based accounts
The system has two built-in accounts, based on what actions you can take:
 Admin - The administrator user has full privileges. For example, as an administrator you can set and modify
configuration settings, add and delete users, restart the AltaVault service, reboot the AltaVault, and create and
view performance and system reports.
 Monitor - Monitor users can view reports and user logs and change their own password. A monitor user cannot
make configuration changes.
Role-based accounts
Use the role-based management feature of AltaVault to specify what roles a user is assigned to, and what actions a user
is permitted to perform on the appliance in each of those roles. You can specify role-based accounts for admin settings,
general settings, prepopulation (prepop) settings, replication settings, report settings, security settings, and storage
settings in the AltaVault.
A role-based account cannot modify another role-based or capability-based account. Only the Admin account and
accounts with the admin settings role can create and modify role-based accounts.
This section describes the roles that you can assign for specific features.
Admin settings
You can assign users permissions to perform administrator activities, including creating and deleting other users. Users
with the Admin role always have read/write permission for all other roles, even if those other roles explicitly indicate
Deny for the user.
General settings
You can assign users permissions to configure the following General Settings:
 Software upgrades
 Licenses
 Email, SNMP settings, and Web settings.
 Hardware RAID settings
 Shelf settings
 Starting and stopping the Storage Optimization Service
 All Networking Settings
 All Maintenance Settings