Permission Levels

Each feature has a minimum permission level (user role) that is required to use the feature.

The permission levels (user roles) are summarized here.

Table 1. Summary of Permission Levels (User Roles) and Access
Permission Level (User Role)	Access
Administrator	All actions
Power User	All actions except user management, inactivity timeout, array setup, and array resetup
Operator	Management actions except to delete or remove data
Guest	View information and choose VMware subnets

The following table explains the methods of user access control.

Table 2. How Nimble Interfaces Manage Access
Interface	Method of User Access Control
GUI	Disables or hides unauthorized actions.
CLI	Ignores unauthorized actions and returns a `Permission denied` message.

The following table lists individual array unit-cs features, the actions associated with each feature, and the minimum permission level (user role) required to perform the action.

Table 3. Features, Actions, and Permission Levels (User Roles)
Feature	Action	Minimum Permission Level (User Role)
Alerts	List / view info	Guest
Alerts	Test	Power User
Arrays	List / view info	Guest
	Discover	Power User
	Edit array name	Power User
	Set up / Re-set up	Administrator
	Add	Power User
	Remove	Power User
	Reboot	Power User
	Shut down (halt)	Power User
	Fail over controllers	Power User
Certificates	Regenerate	Administrator
CHAP user	List / view info	Operator
	Create	Operator
	Delete	Operator
	Edit	Operator
Controllers	List / view info	Guest
	Reboot	Power User
	Fail over	Power User
Date and Time	View (local or UTC time)	Guest
Date and Time	Edit	Power User
Disks	List / view info	Guest
	Add	Power User
	Remove	Power User
DNA	Enable / disable	Power User
	Set secure tunnel	Power User
	Set HTTP proxy	Power User
Domain name / DNS server for a group	List / view info	Guest
Domain name / DNS server for a group	Add	Power User
Expansion shelves	List / view info	Guest
	Add	Power User
	Activate	Power User
Fibre Channel interfaces	List / view info	Guest
	Edit	Power User
	Update configuration	Power User
Groups	List / view info	Guest
	List limits	Guest
	Edit inactivity timeout	Administrator
	Edit other settings	Power User
	Merge	Administrator
	Create throttle	Power User
	Edit throttle	Power User
	Delete throttle	Power User
	Initiate DNA	Power User
	Validate DNA	Power User
	Unset HTTP proxy	Power User
	Reboot	Power User
	Shut down (halt)	Power User
Help	Show the online help	Guest
Initiator groups	List / view info	Operator
	Create	Operator
	Delete	Operator
	Edit	Operator
	Add initiator	Operator
	Remove initiator	Operator
	Add subnet	Operator
	Remove subnet	Operator
IP addresses	List / view info	Guest
	Add	Power User
	Edit	Power User
	Delete	Power User
iSNS server for a group	Server IP address	Power User
	Port number	Power User
	Enable / disable	Power User
Migrations	List / view info	Guest
Network configurations	List / view info	Guest
	Create a draft	Power User
	Delete	Power User
	Validate	Power User
	Activate	Power User
	Edit	Power User
Network interface cards (NICs)	List / view info	Guest
	Edit	Power User
	Assign / unassign a subnet	Power User
NTP server for a group	List / view info	Guest
NTP server for a group	Add	Power User
Performance policies	List / view info	Guest
	Create	Operator
	Delete	Power User
	Edit	Operator
Pools	List / view info	Guest
	Create	Power User
	Delete	Power User
	Edit	Power User
	Assign / unassign array	Power User
	Merge	Power User
Replication partners	List / view info	Guest
	Create	Power User
	Delete	Power User
	Edit	Power User
	Create / edit / delete QoS policy (throttle) settings	Operator
	Pause / resume replication	Operator
	Test connection	Operator
Routes	List / view info	Guest
	Add	Power User
	Edit	Power User
	Delete	Power User
Snapshots	List / view info	Guest
	Delete	Power User
	Edit	Operator
	Set online / offline	Operator
Snapshot collections	List / view info	Guest
	Delete	Power User
	Edit	Operator
SNMP for a group	Edit community string	Power User
	Enable / disable gets	Power User
	Edit responder port number	Power User
	Edit system contact / location	Power User
	Edit trap host IP address	Power User
	Edit trap port number	Power User
	Enable / disable traps	Power User
Software	List / view info	Guest
	Download	Power User
	Pre-check	Power User
	Update / upload	Power User
	Resume an update	Power User
Space reservations, default for a group	Volume reserve	Power User
Space reservations, default for a group	Volume limit	Power User
SSH keys	List / view info	Administrator
	Add	Administrator
	Edit	Administrator
	Delete	Administrator
Statistics	Display	Guest
Subnets	List / view info	Guest
	Add	Power User
	Edit	Power User
	Remove	Power User
Time zone	List / view info	Guest
Time zone	Change	Power User
User accounts, individual	View own profile	Guest
User accounts, individual	Change own password / email address	Guest
User administration	List / view info	Administrator
	Add users	Administrator
	Change passwords	Administrator
	Edit user permissions	Administrator
	Edit timeout interval	Administrator
	Enable / disable users	Administrator
	Remove users	Administrator
User sessions	List / view own info	Guest
User sessions	List / view info for other users	Administrator
VMware plugins	List	Guest
	Subnet, choose	Guest
	Register / Unregister	Power User
Volumes	List / view info	Guest
	Create	Operator
	Delete	Power User
	Edit volume size	Power User
	Edit other volume settings	Operator
	Create / edit / delete ACLs	Operator
	Set online	Operator
	Set offline	Power User
	Take snapshot	Operator
	Restore from snapshot	Power User
	Clone from snapshot	Operator
	Associate with volume collection	Operator
	Disassociate from volume collection	Operator
	Claim partner volume	Power User
	Move to another pool	Power User
Volume collections	List / view info	Guest
	Create	Operator
	Delete	Power User
	Edit	Operator
	Validate	Operator
	Add schedule	Operator
	Edit schedule	Operator
	Delete schedule	Operator
	Take snapshot	Operator
	Restore from snapshot	Power User
	Promote	Power User
	Demote	Power User
	Hand over	Power User
	Stop replication	Power User