ONTAP 9 Manuals ( CA08871-402 )

If allowed, when a user attempts to access a file, ONTAP does not check the traverse permission for the intermediate directories when determining whether to grant or deny access to the file.

If disallowed, ONTAP checks the traverse (execute) permission for all directories in the path to the file.

Adding it to local SMB users or groups on the SVM or to domain users or groups allows bypass traverse checking.

Removing it from local SMB users or groups on the SVM or from domain users or groups disallows bypass traverse checking.

BUILTIN\Administrators

BUILTIN\Power Users

BUILTIN\Backup Operators

BUILTIN\Users

Everyone

If you want to allow members of a custom local or domain group to bypass traverse checking, you must add the SeChangeNotifyPrivilege privilege to that group.

If you want to allow an individual local or domain user to bypass traverse checking and that user is not a member of a group with that privilege, you can add the SeChangeNotifyPrivilege privilege to that user account.

You can disable bypass traverse checking for local or domain users or groups by removing the SeChangeNotifyPrivilege privilege at any time.