The predefined roles for SVM administrators should meet most of your needs. You can create custom roles as necessary. By default, an SVM administrator is assigned the predefined vsadmin role.

The following table lists the predefined roles for SVM administrators:

Role name	Capabilities
vsadmin	Managing own user account local password and key information Managing volumes, except volume moves Managing quotas, qtrees, Snapshot copies, and files Managing LUNs Performing SnapLock operations, except privileged delete Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP Configuring services: DNS, LDAP, and NIS Monitoring jobs Monitoring network connections and network interface Monitoring the health of the SVM
vsadmin-volume	Managing own user account local password and key information Managing volumes, including volume moves Managing quotas, qtrees, Snapshot copies, and files Managing LUNs Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP Configuring services: DNS, LDAP, and NIS Monitoring network interface Monitoring the health of the SVM
vsadmin-protocol	Managing own user account local password and key information Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP Configuring services: DNS, LDAP, and NIS Managing LUNs Monitoring network interface Monitoring the health of the SVM
vsadmin-backup	Managing own user account local password and key information Managing NDMP operations Making a restored volume read/write Managing SnapMirror relationships and Snapshot copies Viewing volumes and network information
vsadmin-snaplock	Managing own user account local password and key information Managing volumes, except volume moves Managing quotas, qtrees, Snapshot copies, and files Performing SnapLock operations, including privileged delete Configuring protocols: NFS and SMB Configuring services: DNS, LDAP, and NIS Monitoring jobs Monitoring network connections and network interface
vsadmin-readonly	Managing own user account local password and key information Monitoring the health of the SVM Monitoring network interface Viewing volumes and LUNs Viewing services and protocols

Role name

Capabilities

vsadmin

Managing own user account local password and key information
Managing volumes, except volume moves
Managing quotas, qtrees, Snapshot copies, and files
Managing LUNs
Performing SnapLock operations, except privileged delete
Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP
Configuring services: DNS, LDAP, and NIS
Monitoring jobs
Monitoring network connections and network interface
Monitoring the health of the SVM

vsadmin-volume

Managing own user account local password and key information
Managing volumes, including volume moves
Managing quotas, qtrees, Snapshot copies, and files
Managing LUNs
Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP
Configuring services: DNS, LDAP, and NIS
Monitoring network interface
Monitoring the health of the SVM

vsadmin-protocol

Managing own user account local password and key information
Configuring protocols: NFS, SMB, iSCSI, FC, FCoE, NVMe/FC and NVMe/TCP
Configuring services: DNS, LDAP, and NIS
Managing LUNs
Monitoring network interface
Monitoring the health of the SVM

vsadmin-backup

Managing own user account local password and key information
Managing NDMP operations
Making a restored volume read/write
Managing SnapMirror relationships and Snapshot copies
Viewing volumes and network information

vsadmin-snaplock

Managing own user account local password and key information
Managing volumes, except volume moves
Managing quotas, qtrees, Snapshot copies, and files
Performing SnapLock operations, including privileged delete
Configuring protocols: NFS and SMB
Configuring services: DNS, LDAP, and NIS
Monitoring jobs
Monitoring network connections and network interface

vsadmin-readonly

Managing own user account local password and key information
Monitoring the health of the SVM
Monitoring network interface
Viewing volumes and LUNs
Viewing services and protocols

ONTAP 9 Manuals ( CA08871-402 )

Predefined roles for SVM administrators

On this page