Comprehensive data protection for all workloads
Post Reply
aaronivoxy
Lurker
Posts: 2
Liked: 1 time
Joined: Dec 02, 2014 10:52 pm

NetApp cDOT Integration

Post by aaronivoxy » Dec 03, 2014 12:07 am 1 person likes this post

Hi,

I have a couple questions that I've been unable to find an answer to in any of the documentation.

1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?
2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.

Thanks!
Aaron

foggy
Veeam Software
Posts: 18637
Liked: 1626 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy » Dec 03, 2014 1:42 pm

aaronivoxy wrote:1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?
Yes, you need to use cluster IP to add it.
aaronivoxy wrote:2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.
There are specific APIs we need access to, however, we haven't tested with restricted rights. You can try to create a separate role and play with permissions or use one of the built-in roles to check whether they possess sufficient rights.

aaronivoxy
Lurker
Posts: 2
Liked: 1 time
Joined: Dec 02, 2014 10:52 pm

Re: NetApp cDOT Integration

Post by aaronivoxy » Dec 03, 2014 4:28 pm

Unfortunately, that's not the answer I wanted; but thanks for the quick reply!

bensh
Novice
Posts: 9
Liked: never
Joined: Nov 12, 2013 11:40 am
Full Name: ben shukrun
Contact:

[MERGED] Veeam storage integration

Post by bensh » Jan 26, 2015 1:58 pm

Hey we use veeam with storage integrtion with 3par and netapp.
so far we work with administrator privileges.
there is any best practice about spicific premission for each storage appliance
best regards ben

foggy
Veeam Software
Posts: 18637
Liked: 1626 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy » Jan 26, 2015 5:01 pm

Ben, we do not currently have the exact list of required permissions, though here's a bit more on 3PAR.

daveaa10
Lurker
Posts: 1
Liked: never
Joined: Dec 12, 2012 10:57 pm
Full Name: Dave
Contact:

[MERGED] Veeam Netapp Intergration Permissions

Post by daveaa10 » Feb 19, 2015 4:42 pm

Does anyone know what the minimum permissions are for a user(service account) on Netapp for using Veeam storage integration?

I tried, the backup role for http, ontapi and ssh, but it said the user didn't have enough permissions.

Regards,
Dave

Vitaliy S.
Product Manager
Posts: 23384
Liked: 1658 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam Netapp Intergration Permissions

Post by Vitaliy S. » Feb 20, 2015 9:24 am 2 people like this post

What NetApp configuration do you use? For 7-mode, you should be configuring these permissions:

Code: Select all

login-http-admin
api-system-*
api-license-* (api-license-list-info)
api-volume-*
api-net-*
api-options-*
api-vfiler-*
api-qtree-*
api-nfs-*
api-snapshot-*
api-lun-*
api-iscsi-*
api-feature-*
api-registry-*
cli-options
api-fcp-*
api-file-*
api-igroup-*
api-clone-*
api-snapvault-*
api-snapmirror-*
api-cf-*

DerOest
Enthusiast
Posts: 45
Liked: 6 times
Joined: Oct 30, 2015 10:10 am
Contact:

Re: NetApp cDOT Integration

Post by DerOest » Nov 30, 2015 9:06 am

Digging up an old thread.

Vitaliy (or anybody else), could you provide some information regarding Clusterd OnTap (8.3.x+)?
This thread is the only information i could find regarding this.

Would be wonderful if the Userguides could be filled with such information (e.g. flexpod_veeam_install_guide_cisco_netapp.pdf and veeam_backup_8_userguide_vmware.pdf "Required Permissions")

Thank you very much & Greetings from Germany!

foggy
Veeam Software
Posts: 18637
Liked: 1626 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy » Nov 30, 2015 3:44 pm

We will have a verified list of required permissions for cDOT after the v9 release.

foggy
Veeam Software
Posts: 18637
Liked: 1626 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: NetApp cDOT Integration

Post by foggy » Mar 17, 2016 3:55 pm 2 people like this post

The list of permissions required for cDOT:

Code: Select all

DEFAULT         readonly
cluster         readonly 
fcp             readonly 
file            readonly 
igroup          readonly 
iscsi           readonly 
network         readonly 
node            readonly 
security        readonly 
security login  readonly 
set             readonly 
snapmirror      all 
system          readonly 
version         readonly 
qtree           readonly
lun             all 
nfs             all 
snapshot        all 
volume          all 
vserver         all

Post Reply

Who is online

Users browsing this forum: Baidu [Spider] and 20 guests