Permission Levels
Each NimbleOS feature has a minimum permission level (user role) that is required to use the feature.
The permission levels (user roles) are summarized here.
Permission Level (User Role) | Access |
---|---|
Administrator | All actions |
Power User | All actions except user management, inactivity timeout, array setup, and array resetup |
Operator | Management actions except to delete or remove data |
Guest | View information and choose VMware subnets |
The following table explains the methods of user access control.
Interface | Method of User Access Control |
---|---|
NimbleOS GUI | Disables or hides unauthorized actions. |
NimbleOS CLI | Ignores unauthorized actions and returns a Permission denied message. |
The following table lists individual Nimble unit-cs features, the actions associated with each feature, and the minimum permission level (user role) required to perform the action.
Feature | Action | Minimum Permission Level (User Role) |
---|---|---|
Alerts | List / view info | Guest |
Test | Power User | |
Arrays | List / view info | Guest |
Discover | Power User | |
Edit array name | Power User | |
Set up / Re-set up | Administrator | |
Add | Power User | |
Remove | Power User | |
Reboot | Power User | |
Shut down (halt) | Power User | |
Fail over controllers | Power User | |
Certificates | Regenerate | Administrator |
CHAP user | List / view info | Operator |
Create | Operator | |
Delete | Operator | |
Edit | Operator | |
Controllers | List / view info | Guest |
Reboot | Power User | |
Fail over | Power User | |
Date and Time | View (local or UTC time) | Guest |
Edit | Power User | |
Disks | List / view info | Guest |
Add | Power User | |
Remove | Power User | |
DNA | Enable / disable | Power User |
Set secure tunnel | Power User | |
Set HTTP proxy | Power User | |
Domain name / DNS server for a group | List / view info | Guest |
Add | Power User | |
Expansion shelves | List / view info | Guest |
Add | Power User | |
Activate | Power User | |
Fibre Channel interfaces | List / view info | Guest |
Edit | Power User | |
Update configuration | Power User | |
Groups | List / view info | Guest |
List limits | Guest | |
Edit inactivity timeout | Administrator | |
Edit other settings | Power User | |
Merge | Administrator | |
Create throttle | Power User | |
Edit throttle | Power User | |
Delete throttle | Power User | |
Initiate DNA | Power User | |
Validate DNA | Power User | |
Unset HTTP proxy | Power User | |
Reboot | Power User | |
Shut down (halt) | Power User | |
Help | Show the online help | Guest |
Initiator groups | List / view info | Operator |
Create | Operator | |
Delete | Operator | |
Edit | Operator | |
Add initiator | Operator | |
Remove initiator | Operator | |
Add subnet | Operator | |
Remove subnet | Operator | |
IP addresses | List / view info | Guest |
Add | Power User | |
Edit | Power User | |
Delete | Power User | |
iSNS server for a group | Server IP address | Power User |
Port number | Power User | |
Enable / disable | Power User | |
Migrations | List / view info | Guest |
Network configurations | List / view info | Guest |
Create a draft | Power User | |
Delete | Power User | |
Validate | Power User | |
Activate | Power User | |
Edit | Power User | |
Network interface cards (NICs) | List / view info | Guest |
Edit | Power User | |
Assign / unassign a subnet | Power User | |
NTP server for a group | List / view info | Guest |
Add | Power User | |
Performance policies | List / view info | Guest |
Create | Operator | |
Delete | Power User | |
Edit | Operator | |
Pools | List / view info | Guest |
Create | Power User | |
Delete | Power User | |
Edit | Power User | |
Assign / unassign array | Power User | |
Merge | Power User | |
Delete | Operator | |
Replication partners | List / view info | Guest |
Create | Power User | |
Delete | Power User | |
Edit | Power User | |
Create / edit / delete QoS policy (throttle) settings | Operator | |
Pause / resume replication | Operator | |
Test connection | Operator | |
Routes | List / view info | Guest |
Add | Power User | |
Edit | Power User | |
Delete | Power User | |
Snapshots | List / view info | Guest |
Delete | Power User | |
Edit | Operator | |
Set online / offline | Operator | |
Snapshot collections | List / view info | Guest |
Delete | Power User | |
Edit | Operator | |
SNMP for a group | Edit community string | Power User |
Enable / disable gets | Power User | |
Edit responder port number | Power User | |
Edit system contact / location | Power User | |
Edit trap host IP address | Power User | |
Edit trap port number | Power User | |
Enable / disable traps | Power User | |
Software (NimbleOS) | List / view info | Guest |
Download | Power User | |
Pre-check | Power User | |
Update / upload | Power User | |
Resume an update | Power User | |
Space reservations, default for a group | Volume reserve | Power User |
Volume quota | Power User | |
Volume warning | Power User | |
Snapshot reserve | Power User | |
Snapshot quota | Power User | |
Snapshot warning | Power User | |
SSH keys | List / view info | Administrator |
Add | Administrator | |
Edit | Administrator | |
Delete | Administrator | |
Statistics | Display | Guest |
Subnets | List / view info | Guest |
Add | Power User | |
Edit | Power User | |
Remove | Power User | |
Time zone | List / view info | Guest |
Change | Power User | |
User accounts, individual | View own profile | Guest |
Change own password / email address | Guest | |
User administration | List / view info | Administrator |
Add users | Administrator | |
Change passwords | Administrator | |
Edit user permissions | Administrator | |
Edit timeout interval | Administrator | |
Enable / disable users | Administrator | |
Remove users | Administrator | |
User sessions | List / view own info | Guest |
List / view info for other users | Administrator | |
VMware plugins | List | Guest |
Subnet, choose | Guest | |
Register / Unregister | Power User | |
Volumes | List / view info | Guest |
Create | Operator | |
Delete | Power User | |
Edit volume size | Power User | |
Edit other volume settings | Operator | |
Create / edit / delete ACLs | Operator | |
Set online | Operator | |
Set offline | Power User | |
Take snapshot | Operator | |
Restore from snapshot | Power User | |
Clone from snapshot | Operator | |
Associate with volume collection | Operator | |
Disassociate from volume collection | Operator | |
Claim partner volume | Power User | |
Move to another pool | Power User | |
Volume collections | List / view info | Guest |
Create | Operator | |
Delete | Power User | |
Edit | Operator | |
Validate | Operator | |
Add schedule | Operator | |
Edit schedule | Operator | |
Delete schedule | Operator | |
Take snapshot | Operator | |
Restore from snapshot | Power User | |
Promote | Power User | |
Demote | Power User | |
Hand over | Power User | |
Stop replication | Power User |