ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • vserver cifs users-and-groups privilege remove-privilege

    Remove privileges from a user or group

    Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

    Description

    The vserver cifs users-and-groups privilege remove-privilege command removes privileges from a local or Active Directory user or group. This command creates a new or modifies an existing privilege entry.

    Parameters

    -vserver <vserver name> - Vserver

    This specifies the name of the Vserver.

    -user-or-group-name <CIFS name> - User or Group Name

    This specifies the name of the local or Active Directory user or group.

    -privileges <Privilege>,…​ - Privileges

    This specifies the list of privileges to be removed from this user or group.

    Examples

    The following example removes the previously added "SeTcbPrivilege" and "SeTakeOwnershipPrivilege" privileges from the user "CIFS_SERVER\u1".

    cluster1::> vserver cifs users-and-groups privilege show
    Vserver        User or Group Name           Privileges
    -------------- ---------------------------- -------------------
    vs1            CIFS_SERVER\u1               SeTcbPrivilege
                                                SeTakeOwnershipPrivilege
    
    cluster1::> vserver cifs users-and-groups privilege remove-privilege -vserver vs1 -user-or-group-name CIFS_SERVER\u1 -privileges SeTcbPrivilege,SeTakeOwnershipPrivilege
    
    cluster1::> vserver cifs users-and-groups privilege show
    Vserver        User or Group Name           Privileges
    -------------- ---------------------------- -------------------
    vs1            CIFS_SERVER\u1               -
    + + The following example removes "SeBackupPrivilege" from the group "BUILTIN\Administrators".
    cluster1::> vserver cifs users-and-groups privilege show
    This table is currently empty.
    
    cluster1::> vserver cifs users-and-groups privilege remove-privilege -vserver vs1 -user-or-group-name BUILTIN\Administrators -privileges SeBackupPrivilege
    
    cluster1::> vserver cifs users-and-groups privilege show
    Vserver        User or Group Name           Privileges
    -------------- ---------------------------- -------------------
    vs1            BUILTIN\Administrators       SeRestorePrivilege
                                                SeSecurityPrivilege
                                                SeTakeOwnershipPrivilege
    Top of Page