Comprehensive data protection for all workloads
Post Reply
aaronivoxy
Lurker
Posts: 2
Liked: 1 time
Joined: Dec 02, 2014 10:52 pm

NetApp cDOT Integration

Post by aaronivoxy » 1 person likes this post

Hi,

I have a couple questions that I've been unable to find an answer to in any of the documentation.

1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?
2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.

Thanks!
Aaron
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy »

aaronivoxy wrote:1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?
Yes, you need to use cluster IP to add it.
aaronivoxy wrote:2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.
There are specific APIs we need access to, however, we haven't tested with restricted rights. You can try to create a separate role and play with permissions or use one of the built-in roles to check whether they possess sufficient rights.
aaronivoxy
Lurker
Posts: 2
Liked: 1 time
Joined: Dec 02, 2014 10:52 pm

Re: NetApp cDOT Integration

Post by aaronivoxy »

Unfortunately, that's not the answer I wanted; but thanks for the quick reply!
bensh
Novice
Posts: 9
Liked: never
Joined: Nov 12, 2013 11:40 am
Full Name: ben shukrun
Contact:

[MERGED] Veeam storage integration

Post by bensh »

Hey we use veeam with storage integrtion with 3par and netapp.
so far we work with administrator privileges.
there is any best practice about spicific premission for each storage appliance
best regards ben
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy »

Ben, we do not currently have the exact list of required permissions, though here's a bit more on 3PAR.
daveaa10
Lurker
Posts: 1
Liked: never
Joined: Dec 12, 2012 10:57 pm
Full Name: Dave
Contact:

[MERGED] Veeam Netapp Intergration Permissions

Post by daveaa10 »

Does anyone know what the minimum permissions are for a user(service account) on Netapp for using Veeam storage integration?

I tried, the backup role for http, ontapi and ssh, but it said the user didn't have enough permissions.

Regards,
Dave
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam Netapp Intergration Permissions

Post by Vitaliy S. » 2 people like this post

What NetApp configuration do you use? For 7-mode, you should be configuring these permissions:

Code: Select all

login-http-admin
api-system-*
api-license-* (api-license-list-info)
api-volume-*
api-net-*
api-options-*
api-vfiler-*
api-qtree-*
api-nfs-*
api-snapshot-*
api-lun-*
api-iscsi-*
api-feature-*
api-registry-*
cli-options
api-fcp-*
api-file-*
api-igroup-*
api-clone-*
api-snapvault-*
api-snapmirror-*
api-cf-*
DerOest
Enthusiast
Posts: 71
Liked: 42 times
Joined: Oct 30, 2015 10:10 am
Contact:

Re: NetApp cDOT Integration

Post by DerOest »

Digging up an old thread.

Vitaliy (or anybody else), could you provide some information regarding Clusterd OnTap (8.3.x+)?
This thread is the only information i could find regarding this.

Would be wonderful if the Userguides could be filled with such information (e.g. flexpod_veeam_install_guide_cisco_netapp.pdf and veeam_backup_8_userguide_vmware.pdf "Required Permissions")

Thank you very much & Greetings from Germany!
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy »

We will have a verified list of required permissions for cDOT after the v9 release.
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy » 2 people like this post

The list of permissions required for cDOT:

Code: Select all

DEFAULT         readonly
cluster         readonly 
fcp             readonly 
file            readonly 
igroup          readonly 
iscsi           readonly 
network         readonly 
node            readonly 
security        readonly 
security login  readonly 
set             readonly 
snapmirror      all 
system          readonly 
version         readonly 
qtree           readonly
lun             all 
nfs             all 
snapshot        all 
volume          all 
vserver         all
Post Reply

Who is online

Users browsing this forum: BartP, dbeerts, Google [Bot], srlarsen and 179 guests