Why do we need "Administrator" role to monitor IBM Storwize and SVC?The problem is that one command which is necessary for downloading of statistical data requires Administrator role.
It is command: svctask cpdumps
The cpdumps command copies dump files from a nonconfiguration node onto the configuration node.
Data can be retrieved via scp only from the configuration node.
The problem is same for getting of data through CIMOM or TPC.
IBM lab comment and recommendation:The cpdumps command is disruptive (can cause files to be deleted) and so does not fit in the Monitor role.
We would like to enhance the roles made available by SVC, ideally making them fully user-definable, but there is no firm plan to do this at the moment.
Storage firmware 8+ brings RestrictedAdmin roleIt is a step forward, use that role instead of "Administrator".
Role desciption as per manual: Users can complete the same tasks and run most of the same commands as administrator-role users. However, users with the Restricted Administrator role are not authorized to run the rmvdisk, rmvdiskhostmap, rmhost, or rmmdiskgrp commands