Roles and privileges on IBM FlashSystem
To allow Snapshot Manager for Data Center to perform snapshot management operations, ensure that the IBM FlashSystem user account used for plug-in configuration has the following roles and privileges assigned:
Create snapshot
Export snapshot
Restore snapshot
Delete snapshot
Here are the predefined user roles in IBM FlashSystem
Security administrator - The security administrator can manage all the FlashSystem Unified features and functions.
Administrator - The administrator can manage everything in the system except creating, changing, or removing users or user groups, changing the user group assignment of users, or assigning roles to user groups.
Copy operator - Users can start and stop all existing FlashCopy®, Metro Mirror, and Global Mirror relationships. Copy-operator-role users can run the system commands that administrator-role users can run that deal with FlashCopy, Metro Mirror, and Global Mirror relationships.
Service - Users can set the time and date on the system, delete dump files, add and delete nodes, apply service, and shut down the system. Users can also complete the same tasks as users in the monitor role.
Monitor - The operator role can only list management information.
Restricted administrator - Users can perform the same task as the administrator-role user and can run most of the commands. However, they cannot remove volumes, host mappings, hosts, or pools. Support personnel can be assigned to this role to help resolve errors and solve problems.
Users with security administrator, and administrator roles assigned can perform all the NetBackup Snapshot Manager's management operations.