NetApp cDOT Integration

[aaronivoxy]

Hi,

I have a couple questions that I've been unable to find an answer to in any of the documentation.

1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?
2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.

Thanks!
Aaron

[foggy]

1. When adding a NetApp storage system running Clustered Data ONTAP to Veeam, do I use the cluster management IP or each individual IP address of the Storage Virtual Machines?

Yes, you need to use cluster IP to add it.

2. What level of access does the Veeam server need to create the snapshots? If it's accessing the system at the cluster-level, I'd like to seriously restrict Veeam's access to just the SVMs with vSphere datastores.

There are specific APIs we need access to, however, we haven't tested with restricted rights. You can try to create a separate role and play with permissions or use one of the built-in roles to check whether they possess sufficient rights.

[aaronivoxy]

Unfortunately, that's not the answer I wanted; but thanks for the quick reply!

[bensh]

Hey we use veeam with storage integrtion with 3par and netapp.
so far we work with administrator privileges.
there is any best practice about spicific premission for each storage appliance
best regards ben

[foggy]

Ben, we do not currently have the exact list of required permissions, though here's a bit more on 3PAR.

[daveaa10]

Does anyone know what the minimum permissions are for a user(service account) on Netapp for using Veeam storage integration?

I tried, the backup role for http, ontapi and ssh, but it said the user didn't have enough permissions.

Regards,
Dave

[Vitaliy S.]

What NetApp configuration do you use? For 7-mode, you should be configuring these permissions:

Code: Select all

login-http-admin
api-system-*
api-license-* (api-license-list-info)
api-volume-*
api-net-*
api-options-*
api-vfiler-*
api-qtree-*
api-nfs-*
api-snapshot-*
api-lun-*
api-iscsi-*
api-feature-*
api-registry-*
cli-options
api-fcp-*
api-file-*
api-igroup-*
api-clone-*
api-snapvault-*
api-snapmirror-*
api-cf-*

[DerOest]

Digging up an old thread.

Vitaliy (or anybody else), could you provide some information regarding Clusterd OnTap (8.3.x+)?
This thread is the only information i could find regarding this.

Would be wonderful if the Userguides could be filled with such information (e.g. flexpod_veeam_install_guide_cisco_netapp.pdf and veeam_backup_8_userguide_vmware.pdf "Required Permissions")

Thank you very much & Greetings from Germany!

[foggy]

We will have a verified list of required permissions for cDOT after the v9 release.

[foggy]

The list of permissions required for cDOT:

Code: Select all

DEFAULT         readonly
cluster         readonly 
fcp             readonly 
file            readonly 
igroup          readonly 
iscsi           readonly 
network         readonly 
node            readonly 
security        readonly 
security login  readonly 
set             readonly 
snapmirror      all 
system          readonly 
version         readonly 
qtree           readonly
lun             all 
nfs             all 
snapshot        all 
volume          all 
vserver         all