[Amazon FSx for NetApp ONTAP] 実行できるONTAP CLIのコマンドは制限があるので注意しよう

[Amazon FSx for NetApp ONTAP] 実行できるONTAP CLIのコマンドは制限があるので注意しよう

Clock Icon2022.10.27

この記事は公開されてから1年以上経過しています。情報が古い可能性がありますので、ご注意ください。

ONTAP command referenceに記載のあるコマンドなのにコマンドを叩けられないぞ

こんにちは、のんピ(@non____97)です。

皆さんはAmazon FSx for NetApp ONTAP(以降FSx for ONTAP)でONTAP CLIを使用しているときに「ONTAP command referenceに記載のあるコマンドなのにコマンドを叩けられないぞ」と思ったことはありますか? 私はあります。

マネジメントコンソールやAWS CLIから設定できないCIFSの設定やQoSなどはFSx for ONTAPファイルシステムやSVMにSSHしてONTAP CLIで操作するか、ONTAP REST APIを叩く必要があります。

その際、ONTAP command referenceを参考に設定する項目を把握することがあると思います。

しかし、FSx for ONTAPはAWSのマネージドサービスである関係上、ONTAP command referenceに記載されている全てのコマンドを叩けられる訳ではありません。

対処として

「そのコマンドをFSx for ONTAPで叩けられるか都度、FSx for ONTAPで確認しよう!!」

というのはもっともですが、ある程度どのコマンドが叩けられるのか知りたいですよね?

ということで、2022/10/27時点の私の環境でFSx for ONTAPがサポートしているONTAP CLIのコマンドを確認してみました。

確認してみた

バージョンの確認

2022/10/27現在、FSx for ONTAPファイルシステムを新規で作成する場合のONTAPのバージョンを確認します。

FsxId0a0bc0790c854e078::> version
NetApp Release 9.11.0P1: Tue Mar 22 17:41:04 UTC 2022

ONTAPのバージョンは9.11.0P1でした。

FSx for ONTAPファイルシステムで実行できるコマンド一覧

それでは、本題のFSx for ONTAPファイルシステムで実行できるコマンド一覧を確認します。

確認する際はsecurity login role showというコマンドを叩きます。

実行した結果は以下の通りです。

# ユーザーとロールの確認
FsxId0a0bc0790c854e078::> whoami
  (security login whoami)

User: fsxadmin
Role: fsxadmin

# FSx for ONTAPファイルシステムで実行できるコマンド一覧を確認
FsxId0a0bc0790c854e078::> security login role show
           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           admin         DEFAULT                                       all
           autosupport   DEFAULT                                       none
                         set                                           all
                         system node autosupport                       all
           backup        DEFAULT                                       none
                         security login role show-user-capability      all
                         volume                                        readonly
                         vserver services ndmp                         all
           fsxadmin      DEFAULT                                       none
                         application                                   all
                         cluster application-record                    all
                         cluster date show                             readonly
                         cluster identity modify                       readonly
                         cluster identity show                         readonly
                         cluster log-forwarding           -port !55555 all
                         cluster peer                                  all
                         cluster statistics show                       readonly
                         cluster time-service ntp server create        readonly
                         cluster time-service ntp server delete        readonly
                         cluster time-service ntp server modify        readonly
                         cluster time-service ntp server show          readonly
                         debug san lun                                 all
                         df         -vserver !FsxId* -vserver !Cluster readonly
                         echo                                          all
                         event generate-autosupport-log                all
                         job delete -vserver !FsxId* -vserver !Cluster all
                         job expunge
                                    -vserver !FsxId* -vserver !Cluster all
                         job history
                                    -vserver !FsxId* -vserver !Cluster all
                         job pause  -vserver !FsxId* -vserver !Cluster all
                         job private
                                    -vserver !FsxId* -vserver !Cluster all
                         job resume -vserver !FsxId* -vserver !Cluster all
                         job schedule                                  all
                         job schedule show-jobs
                                              -owner !- -owner !FsxId* all
                         job show   -vserver !FsxId* -vserver !Cluster all
                         job show-bynode
                                    -vserver !FsxId* -vserver !Cluster all
                         job show-cluster
                                    -vserver !FsxId* -vserver !Cluster all
                         job show-completed
                                    -vserver !FsxId* -vserver !Cluster all
                         job softpause
                                    -vserver !FsxId* -vserver !Cluster all
                         job stop   -vserver !FsxId* -vserver !Cluster all
                         job unclaim
                                    -vserver !FsxId* -vserver !Cluster all
                         job watch-progress
                                    -vserver !FsxId* -vserver !Cluster all
                         lun                                           all
                         lun import prepare-to-downgrade               none
                         network arp                                   none
                         network cloud routing-table create            readonly
                         network cloud routing-table delete            readonly
                         network cloud routing-table show              readonly
                         network connections
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      network connections options buffer modify     readonly
                         network connections options buffer show       readonly
                         network interface create
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface delete
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface dns-lb-stats
                                    -vserver !FsxId* -vserver !Cluster all
                         network interface failover-groups create
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups delete
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups modify
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups show
                                                 -broadcast-domain Fsx readonly
                         network interface lif-weights
                                    -vserver !FsxId* -vserver !Cluster all
                         network interface modify
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface service-policy
                                    -vserver !FsxId* -vserver !Cluster readonly
                         network interface show
                                  -role data|cluster_mgmt|intercluster readonly
                         network ndp neighbor
                                    -vserver !FsxId* -vserver !Cluster all
                         network ping                -vserver !Cluster readonly
                         network ping6               -vserver !Cluster readonly
                         network port broadcast-domain create
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain delete
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain modify
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain show
                                                 -broadcast-domain Fsx all
                         network port delete     -broadcast-domain Fsx readonly
                         network port modify     -broadcast-domain Fsx readonly
                         network port show       -broadcast-domain Fsx readonly
                         network route
                                    -vserver !FsxId* -vserver !Cluster all
                         network route cdb                             none
                         network traceroute          -vserver !Cluster all
                         network traceroute6         -vserver !Cluster all
                         protection-type show                          readonly
                         qos                                           all
                         security anti-ransomware volume
                                    -vserver !FsxId* -vserver !Cluster all
                         security audit log show                       readonly
                         security certificate ca-issued revoke
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate ca-issued show
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate config modify            readonly
                         security certificate config show              readonly
                         security certificate create
                                     -type server-ca -is-default false all
                         security certificate delete
                                     -type server-ca -is-default false all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      security certificate file show
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate generate-csr             all
                         security certificate install  -type server-ca all
                         security certificate print
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate rename
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate show
                                     -type server-ca -is-default false all
                         security certificate sign
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate truststore check
                                    -vserver !FsxId* -vserver !Cluster all
                         security ipsec
                                    -vserver !FsxId* -vserver !Cluster all
                         security ipsec config                         all
                         security key-manager external
                                    -vserver !FsxId* -vserver !Cluster all
                         security key-manager key create               all
                         security key-manager key query
                                    -vserver !FsxId* -vserver !Cluster all
                         security key-manager key show                 all
                         security key-manager show-key-store
                                    -vserver !FsxId* -vserver !Cluster readonly
                         security login
                                    -vserver !FsxId* -vserver !Cluster all
                         security login expire-password
                               -username !admin -username !autosupport all
                         security login password                       all
                         security login password-prepare-to-downgrade  none
                         security login publickey     -username !admin all
                         security login role                           readonly
                         security login role config                    all
                         security login role config modify
                                       -vserver FsxId* -role !fsxadmin none
                         security login role config reset              none
                         security login role config show
                                       -vserver FsxId* -role !fsxadmin none
                         security login role create
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role delete
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role modify
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role prepare-to-downgrade      none
                         security login role show
                                    -vserver !FsxId* -vserver !Cluster all
                         security login whoami                         readonly
                         security protocol                             readonly
                         security session kill-cli    -username !admin all
                         security session limit create                 readonly
                         security session limit delete                 readonly
                         security session limit modify                 readonly
                         security session limit show                   readonly
                         security session show        -username !admin readonly
                         security snmpusers                            none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      security ssh                                  readonly
                         security ssh add
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssh modify
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssh prepare-to-downgrade             none
                         security ssh remove
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssh show
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssl
                                    -vserver !FsxId* -vserver !Cluster all
                         set                                           all
                         sleep                                         all
                         snaplock   -vserver !FsxId* -vserver !Cluster all
                         snaplock compliance-clock                     all
                         snapmirror abort                              all
                         snapmirror break                              all
                         snapmirror cache                              all
                         snapmirror check                              all
                         snapmirror create                             all
                         snapmirror delete                             all
                         snapmirror failover                           all
                         snapmirror initialize                         all
                         snapmirror initialize-ls-set                  all
                         snapmirror list-destinations                  all
                         snapmirror list-unprotected                   all
                         snapmirror mediator                           all
                         snapmirror modify                             all
                         snapmirror policy         -policy !FSxPolicy* all
                         snapmirror promote                            all
                         snapmirror protect                            all
                         snapmirror quiesce                            all
                         snapmirror release                            all
                         snapmirror restore                            all
                         snapmirror resume                             all
                         snapmirror resync                             all
                         snapmirror show                               all
                         snapmirror show-capabilities
                                          -endpoint-type !object-store all
                         snapmirror show-history                       all
                         snapmirror snapshot-owner                     all
                         snapmirror update                             all
                         snapmirror update-ls-set                      all
                         statistics aggregate                          readonly
                         statistics catalog
-object client*|ext_cache*|fpolicy*|lun*|nfs*|qtree*|volume*|workload_volume
                                                                       readonly
                         statistics lif                                readonly
                         statistics lun                                readonly
                         statistics qtree                              readonly
                         statistics samples         -sample-id !FsxId* all
                         statistics show
-object client*|ext_cache*|fpolicy*|lun*|nfs*|qtree*|volume*|workload_volume
                                                                       readonly
                         statistics show-periodic                      readonly
                         statistics start           -sample-id !FsxId* all
                         statistics stop            -sample-id !FsxId* all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      statistics volume show         -volume !vol0* readonly
                         statistics vserver show
                                    -vserver !FsxId* -vserver !Cluster readonly
                         statistics-v1                                 readonly
                         storage aggregate show-efficiency             readonly
                         storage aggregate show-space
                                                    -aggregate !aggr0* all
                         storage-service                               none
                         system                                        none
                         system node virtual-machine instance show-settings
                                                                       readonly
                         system services firewall policy
                                    -vserver !FsxId* -vserver !Cluster readonly
                         system services firewall policy service       none
                         timezone                                      all
                         version                                       readonly
                         volume analytics
                                    -vserver !FsxId* -vserver !Cluster all
                         volume autosize
                                    -vserver !FsxId* -vserver !Cluster all
                         volume clone
                                    -vserver !FsxId* -vserver !Cluster all
                         volume clone sharing-by-split undo start-all  all
                         volume conversion
                                    -vserver !FsxId* -vserver !Cluster all
                         volume create
                                    -vserver !FsxId* -vserver !Cluster all
                         volume delete
                                    -vserver !FsxId* -vserver !Cluster all
                         volume destroy
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency check
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency inactive-data-compression   none
                         volume efficiency modify
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency off
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency on
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency policy
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency prepare-to-downgrade        none
                         volume efficiency promote
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency revert-to                   none
                         volume efficiency show
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency start
                    -vserver !FsxId* -vserver !Cluster -scan-all false all
                         volume efficiency stat                        readonly
                         volume efficiency stop
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency undo
                                    -vserver !FsxId* -vserver !Cluster all
                         volume encryption
                                    -vserver !FsxId* -vserver !Cluster all
                         volume encryption modify-enc-blob             none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      volume encryption retry-online                all
                         volume encryption secure-purge show-version   all
                         volume expand
                                    -vserver !FsxId* -vserver !Cluster all
                         volume file
                                    -vserver !FsxId* -vserver !Cluster all
                         volume file async-delete prepare-for-revert   none
                         volume file clone split load                  all
                         volume file clone token                       all
                         volume file copy show
                -source-vserver-id !FsxId* -source-vserver-id !Cluster readonly
                         volume file fingerprint abort                 none
                         volume file fingerprint dump                  none
                         volume file move show
                -source-vserver-id !FsxId* -source-vserver-id !Cluster readonly
                         volume file source                            none
                         volume flexcache                              all
                         volume flexcache prepare-to-downgrade         none
                         volume flexgroup
                                    -vserver !FsxId* -vserver !Cluster all
                         volume flexgroup config modify                all
                         volume flexgroup config show                  all
                         volume language
                                    -vserver !FsxId* -vserver !Cluster all
                         volume make-vsroot
                                    -vserver !FsxId* -vserver !Cluster all
                         volume managed-feature                        readonly
                         volume modify
                                    -vserver !FsxId* -vserver !Cluster all
                         volume mount                                  all
                         volume move                                   none
                         volume offline
                                    -vserver !FsxId* -vserver !Cluster all
                         volume online
                                    -vserver !FsxId* -vserver !Cluster all
                         volume qtree                                  all
                         volume quota                                  all
                         volume reallocation
                                    -vserver !FsxId* -vserver !Cluster all
                         volume reallocation off                       all
                         volume reallocation on                        all
                         volume recovery-queue
                                    -vserver !FsxId* -vserver !Cluster all
                         volume rehost
                                    -vserver !FsxId* -vserver !Cluster all
                         volume remove-junction
                                    -vserver !FsxId* -vserver !Cluster all
                         volume rename                                 all
                         volume restrict
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show-footprint
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show-space
                                    -vserver !FsxId* -vserver !Cluster all
                         volume size
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      volume snaplock
                                    -vserver !FsxId* -vserver !Cluster all
                         volume snaplock prepare-to-downgrade          none
                         volume snapshot
                                    -vserver !FsxId* -vserver !Cluster all
                         volume snapshot event-config modify           readonly
                         volume snapshot event-config show             readonly
                         volume snapshot policy                        all
                         volume snapshot prepare-for-revert            none
                         volume snapshot snapdb size                   none
                         volume unmount                                all
                         vserver active-directory
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver add-aggregates                        none
                         vserver add-protocols
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver audit
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver audit prepare-to-downgrade            none
                         vserver check
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver cifs
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver cifs branchcache log                  all
                         vserver cifs cache show-count                 all
                         vserver cifs prepare-to-downgrade             none
                         vserver cifs security-encryption-required-dc-connections-prepare-to-downgrade
                                                                       none
                         vserver cifs stat                             all
                         vserver config                                none
                         vserver config-replication
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver context                               all
                         vserver copy-offload                          all
                         vserver create
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver create-sync-destination
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver export-policy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver fcp                                   none
                         vserver fpolicy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver http prepare-to-downgrade             none
                         vserver http-proxy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver iscsi
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver iscsi security prepare-to-downgrade   none
                         vserver locks
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver modify
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver name-mapping
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver nfs
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver nfs client                            all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      vserver nfs credentials count                 all
                         vserver nfs prepare-for-v3-ms-dos-client-downgrade
                                                                       none
                         vserver nfs prepare-to-downgrade              none
                         vserver nvme                                  none
                         vserver object-store-server
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver options
-option-name replication.throttle.incoming.max_kbs|replication.throttle.outgoing.max_kbs
                                                                       all
                         vserver peer
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver peer modify-local-name
                                  -new-name !FsxId* -new-name !Cluster all
                         vserver peer repeer                           all
                         vserver peer transition
                        -local-vserver !FsxId* -local-vserver !Cluster all
                         vserver prepare-for-revert                    none
                         vserver remove-aggregates                     none
                         vserver remove-protocols
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver rename                                none
                         vserver restamp-msid
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver san                                   none
                         vserver security
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver services
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver services access-check server-discovery show-host
                                                                       all
                         vserver services name-service cache settings modify
                                                                       all
                         vserver services name-service cache settings show
                                                                       all
                         vserver services name-service cache show-count
                                                                       all
                         vserver services name-service dns dynamic-update prepare-to-downgrade
                                                                       none
                         vserver services name-service unix-group max-limit
                                                                       all
                         vserver services name-service unix-user max-limit
                                                                       all
                         vserver services name-service ypbind restart  all
                         vserver services name-service ypbind status   all
                         vserver services ndmp extensions modify       all
                         vserver services ndmp extensions show         all
                         vserver services web access
                              -role !admin -role !none -role !readonly readonly
                         vserver show
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver show-aggregates
                                    -vserver !FsxId* -vserver !Cluster readonly
                         vserver show-protocols
                                    -vserver !FsxId* -vserver !Cluster readonly
                         vserver smtape
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver snapdiff-rpc-server
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      vserver start
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver stop
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver unlock
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver vscan
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver vsmd
                                    -vserver !FsxId* -vserver !Cluster all
                         vvol                                          none
           none          DEFAULT                                       none
           readonly      DEFAULT                                       readonly
                         security                                      readonly
                         security login password                       all
                         security login publickey                      all
                         security login role show-user-capability      all
                         set                                           all
           snaplock      DEFAULT                                       none
                         set                                           all
                         volume create                                 all
                         volume modify                                 all
                         volume move                                   all
                         volume move governor                          none
                         volume move recommend                         none
                         volume show                                   all
svm        vsadmin       DEFAULT                                       none
                         application create                            all
                         application delete                            all
                         application hostdata                          all
                         application metadata                          all
                         application modify                            all
                         application show                              readonly
                         application show-lun                          readonly
                         application show-statistics                   readonly
                         application show-template                     readonly
                         application snapshot                          all
                         application volume show                       readonly
                         cluster application-record                    all
                         df                                            readonly
                         event generate-autosupport-log                all
                         job                                           all
                         job schedule                                  all
                         job schedule cron                             all
                         job schedule interval                         all
                         lun                                           all
                         network arp                                   all
                         network connections                           readonly
                         network connections active show-clients       none
                         network connections active show-protocols     none
                         network connections active show-services      none
                         network interface                             readonly
                         network interface failover-groups             readonly
                         network ndp                                   all
                         network ping                                  all
                         network ping6                                 all
                         network port                                  readonly

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin       network route                                 all
                         network traceroute                            all
                         network traceroute6                           all
                         security certificate                          all
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 all
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         all
                         security login motd                           all
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security login whoami                         all
                         security multi-admin request                  all
                         security multi-admin request approve          none
                         security multi-admin request veto             none
                         security ssh                                  all
                         security ssl                                  all
                         set                                           all
                         snapdiff api start                            all
                         snaplock                                      all
                         snapmirror                                    all
                         statistics                                    readonly
                         statistics catalog                            readonly
                         statistics samples delete                     all
                         statistics show-periodic                      readonly
                         statistics start                              readonly
                         statistics stop                               readonly
                         storage-service                               readonly
                         system node virtual-machine instance show-settings
                                                                       readonly
                         system services firewall policy               readonly
                         timezone                                      all
                         version                                       all
                         volume                                        all
                         volume efficiency                             none
                         volume move                                   none
                         vserver                                       readonly
                         vserver audit                                 all
                         vserver cifs                                  all
                         vserver export-policy                         all
                         vserver fcp                                   all
                         vserver fpolicy                               all
                         vserver http                                  all
                         vserver http-proxy                            all
                         vserver iscsi                                 all
                         vserver locks                                 all
                         vserver name-mapping                          all
                         vserver nfs                                   all
                         vserver nvme                                  all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin       vserver object-store-server                   all
                         vserver security file-directory               all
                         vserver security trace filter                 all
                         vserver security trace trace-result           all
                         vserver services                              all
                         vserver services name-service unix-group max-limit
                                                                       none
                         vserver services name-service unix-user max-limit
                                                                       none
                         vserver services ndmp                         all
                         vserver services ndmp status                  all
                         vserver services web                          none
                         vserver smtape                                all
                         vserver smtape break                          all
                         vserver vscan                                 all
                         vvol clone-create                             all
                         vvol create                                   all
                         vvol delete                                   all
                         vvol mapping-create                           all
                         vvol modify-performance-policy                all
                         vvol show                                     all
           vsadmin-backup
                         DEFAULT                                       none
                         df                                            readonly
                         job                                           all
                         job schedule                                  readonly
                         job schedule cron                             none
                         job schedule interval                         none
                         network interface                             readonly
                         security certificate                          readonly
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 readonly
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         readonly
                         security login motd                           readonly
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security multi-admin request                  all
                         security multi-admin request approve          none
                         security multi-admin request veto             none
                         set                                           all
                         snapdiff api start                            all
                         snapmirror                                    all
                         snapmirror initialize-ls-set                  none
                         snapmirror update-ls-set                      none
                         timezone                                      all
                         version                                       all
                         volume                                        all
                         volume clone                                  none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin-backup
                         volume efficiency                             none
                         volume file                                   none
                         volume flexcache                              none
                         volume move                                   none
                         volume qtree                                  none
                         volume quota                                  none
                         volume snapshot                               all
                         vserver peer                                  readonly
                         vserver services ndmp                         all
           vsadmin-protocol
                         DEFAULT                                       none
                         df                                            readonly
                         lun                                           all
                         network interface                             readonly
                         network interface failover-groups             none
                         security certificate                          readonly
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 readonly
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         all
                         security login motd                           all
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security ssh                                  all
                         security ssl                                  all
                         set                                           all
                         snapdiff api start                            all
                         timezone                                      all
                         version                                       all
                         volume                                        readonly
                         volume check                                  none
                         volume efficiency                             none
                         volume move                                   none
                         vserver                                       readonly
                         vserver audit                                 all
                         vserver cifs                                  all
                         vserver export-policy                         all
                         vserver fcp                                   all
                         vserver fpolicy                               all
                         vserver http                                  all
                         vserver http-proxy                            all
                         vserver iscsi                                 all
                         vserver locks                                 all
                         vserver name-mapping                          all
                         vserver nfs                                   all
                         vserver nvme                                  all
                         vserver object-store-server                   all
                         vserver security trace filter                 all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin-protocol
                         vserver security trace trace-result           all
                         vserver services                              all
                         vserver services name-service unix-group max-limit
                                                                       none
                         vserver services name-service unix-user max-limit
                                                                       none
                         vserver services web                          none
                         vserver vscan                                 all
           vsadmin-readonly
                         DEFAULT                                       none
                         df                                            readonly
                         lun                                           readonly
                         network interface                             readonly
                         network interface failover-groups             none
                         security certificate                          readonly
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 readonly
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         readonly
                         security login motd                           readonly
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security ssh                                  readonly
                         security ssl                                  readonly
                         set                                           all
                         statistics                                    readonly
                         statistics cache                              none
                         statistics catalog                            readonly
                         statistics lif                                none
                         statistics lun                                none
                         statistics samples                            none
                         statistics show-periodic                      none
                         statistics start                              none
                         statistics stop                               none
                         statistics volume                             none
                         system node virtual-machine instance show-settings
                                                                       readonly
                         timezone                                      all
                         version                                       all
                         volume                                        readonly
                         volume check                                  none
                         volume efficiency                             none
                         volume move                                   none
                         vserver                                       readonly
                         vserver http-proxy                            readonly
                         vserver nvme                                  readonly
                         vserver services name-service unix-group max-limit
                                                                       none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin-readonly
                         vserver services name-service unix-user max-limit
                                                                       none
                         vserver services web                          none
           vsadmin-snaplock
                         DEFAULT                                       none
                         df                                            readonly
                         job                                           all
                         job schedule                                  readonly
                         job schedule cron                             none
                         job schedule interval                         none
                         network interface                             readonly
                         security certificate                          readonly
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 readonly
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         all
                         security login motd                           all
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security multi-admin request                  all
                         security multi-admin request approve          none
                         security multi-admin request veto             none
                         security ssh                                  all
                         security ssl                                  all
                         set                                           all
                         snaplock                                      all
                         timezone                                      all
                         version                                       all
                         volume                                        all
                         vserver                                       readonly
                         vserver audit                                 all
                         vserver cifs                                  all
                         vserver export-policy                         all
                         vserver fpolicy                               all
                         vserver http                                  all
                         vserver locks                                 all
                         vserver name-mapping                          all
                         vserver nfs                                   all
                         vserver security trace filter                 all
                         vserver security trace trace-result           all
                         vserver services                              all
                         vserver services name-service unix-group max-limit
                                                                       none
                         vserver services name-service unix-user max-limit
                                                                       none
                         vserver vscan                                 all
           vsadmin-volume
                         DEFAULT                                       none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin-volume
                         df                                            readonly
                         job                                           all
                         job schedule                                  readonly
                         job schedule cron                             none
                         job schedule interval                         none
                         lun                                           all
                         network interface                             readonly
                         network interface failover-groups             none
                         security certificate                          readonly
                         security certificate file                     none
                         security ipsec ca-certificate                 all
                         security ipsec config show                    readonly
                         security ipsec policy                         all
                         security ipsec show-ikesa                     readonly
                         security ipsec show-ipsecsa                   readonly
                         security key-manager external                 readonly
                         security key-manager key query                all
                         security key-manager show-key-store           readonly
                         security key-manager volume-encryption-supported
                                                                       readonly
                         security login banner                         all
                         security login motd                           all
                         security login password                       all
                         security login publickey                      all
                         security login role show-ontapi               all
                         security login role show-user-capability      all
                         security multi-admin request                  all
                         security multi-admin request approve          none
                         security multi-admin request veto             none
                         security ssh                                  all
                         security ssl                                  all
                         set                                           all
                         snapdiff api start                            all
                         timezone                                      all
                         version                                       all
                         volume                                        all
                         volume efficiency                             none
                         volume move                                   none
                         vserver                                       readonly
                         vserver audit                                 all
                         vserver cifs                                  all
                         vserver export-policy                         all
                         vserver fcp                                   all
                         vserver fpolicy                               all
                         vserver http                                  all
                         vserver iscsi                                 all
                         vserver locks                                 all
                         vserver name-mapping                          all
                         vserver nfs                                   all
                         vserver nvme                                  all
                         vserver object-store-server                   all
                         vserver security trace filter                 all
                         vserver security trace trace-result           all
                         vserver services                              all
                         vserver services name-service unix-group max-limit
                                                                       none
                         vserver services name-service unix-user max-limit
                                                                       none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
svm        vsadmin-volume
                         vserver services web                          none
                         vserver vscan                                 all
702 entries were displayed.

702個のコマンドが表示されました。

こちらのコマンド全て実行できるという訳ではありません。そのコマンドを実行できるかはそれぞれのコマンドに設定されたアクセスレベル(Access Level)を確認します。

アクセスレベルはallreadonlynoneの3種類あります。それぞれの効果は以下の通りです。

アクセスレベル 効果
all ロールは、指定したディレクトリとそのサブディレクトリ(存在する場合)にアクセスでき、ディレクトリとサブディレクトリ内のすべてのコマンドを実行できます。
readonly ロールは、指定したディレクトリとそのサブディレクトリ(存在する場合)に読み取り専用でアクセスできます。この組み合わせでは、ロールのアクセスは、指定したディレクトリとサブディレクトリ内のshowコマンドのみに制限されます。 ディレクトリ内の他のすべてのコマンドには、ロールはアクセスできません。
none ロールは、指定したディレクトリ、そのサブディレクトリ、およびコマンドにアクセスできません。

参考 : アクセス制御ロールのカスタマイズに関する考慮事項

そのため、noneとなっているコマンドは実行することはできません。

FsxId0a0bc0790c854e078::> network arp

Error: "arp" is not a recognized command

readonlyとなっているコマンドはshowコマンドのみ実行できます。

# readonly だが create であるため実行できないことを確認
FsxId0a0bc0790c854e078::> cluster time-service ntp server creaate

Error: "creaate" is not a recognized command

# readonly で show であるため実行できることを確認
FsxId0a0bc0790c854e078::> cluster time-service ntp server show
                                        Is
                                        Authentication
Server                         Version  Enabled        Key ID
------------------------------ -------  -------------- ------
169.254.169.123                auto     false          -

また、そもそもこの一覧に表示されていないコマンドは叩けません。

FsxId0a0bc0790c854e078::> vserver rename

Error: "rename" is not a recognized command

ロールによって叩けるコマンドは異なります。fsxadminのロールが実行できるコマンドを確認したい場合は、security login role show -role fsxadminと実行します。

FsxId0a0bc0790c854e078::> security login role show -role fsxadmin
           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      DEFAULT                                       none
                         application                                   all
                         cluster application-record                    all
                         cluster date show                             readonly
                         cluster identity modify                       readonly
                         cluster identity show                         readonly
                         cluster log-forwarding           -port !55555 all
                         cluster peer                                  all
                         cluster statistics show                       readonly
                         cluster time-service ntp server create        readonly
                         cluster time-service ntp server delete        readonly
                         cluster time-service ntp server modify        readonly
                         cluster time-service ntp server show          readonly
                         debug san lun                                 all
                         df         -vserver !FsxId* -vserver !Cluster readonly
                         echo                                          all
                         event generate-autosupport-log                all
                         job delete -vserver !FsxId* -vserver !Cluster all
                         job expunge
                                    -vserver !FsxId* -vserver !Cluster all
                         job history
                                    -vserver !FsxId* -vserver !Cluster all
                         job pause  -vserver !FsxId* -vserver !Cluster all
                         job private
                                    -vserver !FsxId* -vserver !Cluster all
                         job resume -vserver !FsxId* -vserver !Cluster all
                         job schedule                                  all
                         job schedule show-jobs
                                              -owner !- -owner !FsxId* all
                         job show   -vserver !FsxId* -vserver !Cluster all
                         job show-bynode
                                    -vserver !FsxId* -vserver !Cluster all
                         job show-cluster
                                    -vserver !FsxId* -vserver !Cluster all
                         job show-completed
                                    -vserver !FsxId* -vserver !Cluster all
                         job softpause
                                    -vserver !FsxId* -vserver !Cluster all
                         job stop   -vserver !FsxId* -vserver !Cluster all
                         job unclaim
                                    -vserver !FsxId* -vserver !Cluster all
                         job watch-progress
                                    -vserver !FsxId* -vserver !Cluster all
                         lun                                           all
                         lun import prepare-to-downgrade               none
                         network arp                                   none
                         network cloud routing-table create            readonly
                         network cloud routing-table delete            readonly
                         network cloud routing-table show              readonly
                         network connections
                                    -vserver !FsxId* -vserver !Cluster all
                         network connections options buffer modify     readonly
                         network connections options buffer show       readonly
                         network interface create
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface delete
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface dns-lb-stats
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      network interface failover-groups create
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups delete
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups modify
                                                 -broadcast-domain Fsx readonly
                         network interface failover-groups show
                                                 -broadcast-domain Fsx readonly
                         network interface lif-weights
                                    -vserver !FsxId* -vserver !Cluster all
                         network interface modify
                                  -role data|cluster_mgmt|intercluster readonly
                         network interface service-policy
                                    -vserver !FsxId* -vserver !Cluster readonly
                         network interface show
                                  -role data|cluster_mgmt|intercluster readonly
                         network ndp neighbor
                                    -vserver !FsxId* -vserver !Cluster all
                         network ping                -vserver !Cluster readonly
                         network ping6               -vserver !Cluster readonly
                         network port broadcast-domain create
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain delete
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain modify
                                                 -broadcast-domain Fsx all
                         network port broadcast-domain show
                                                 -broadcast-domain Fsx all
                         network port delete     -broadcast-domain Fsx readonly
                         network port modify     -broadcast-domain Fsx readonly
                         network port show       -broadcast-domain Fsx readonly
                         network route
                                    -vserver !FsxId* -vserver !Cluster all
                         network route cdb                             none
                         network traceroute          -vserver !Cluster all
                         network traceroute6         -vserver !Cluster all
                         protection-type show                          readonly
                         qos                                           all
                         security anti-ransomware volume
                                    -vserver !FsxId* -vserver !Cluster all
                         security audit log show                       readonly
                         security certificate ca-issued revoke
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate ca-issued show
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate config modify            readonly
                         security certificate config show              readonly
                         security certificate create
                                     -type server-ca -is-default false all
                         security certificate delete
                                     -type server-ca -is-default false all
                         security certificate file show
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate generate-csr             all
                         security certificate install  -type server-ca all
                         security certificate print
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate rename
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      security certificate show
                                     -type server-ca -is-default false all
                         security certificate sign
                                    -vserver !FsxId* -vserver !Cluster all
                         security certificate truststore check
                                    -vserver !FsxId* -vserver !Cluster all
                         security ipsec
                                    -vserver !FsxId* -vserver !Cluster all
                         security ipsec config                         all
                         security key-manager external
                                    -vserver !FsxId* -vserver !Cluster all
                         security key-manager key create               all
                         security key-manager key query
                                    -vserver !FsxId* -vserver !Cluster all
                         security key-manager key show                 all
                         security key-manager show-key-store
                                    -vserver !FsxId* -vserver !Cluster readonly
                         security login
                                    -vserver !FsxId* -vserver !Cluster all
                         security login expire-password
                               -username !admin -username !autosupport all
                         security login password                       all
                         security login password-prepare-to-downgrade  none
                         security login publickey     -username !admin all
                         security login role                           readonly
                         security login role config                    all
                         security login role config modify
                                       -vserver FsxId* -role !fsxadmin none
                         security login role config reset              none
                         security login role config show
                                       -vserver FsxId* -role !fsxadmin none
                         security login role create
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role delete
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role modify
                                    -vserver !FsxId* -vserver !Cluster all
                         security login role prepare-to-downgrade      none
                         security login role show
                                    -vserver !FsxId* -vserver !Cluster all
                         security login whoami                         readonly
                         security protocol                             readonly
                         security session kill-cli    -username !admin all
                         security session limit create                 readonly
                         security session limit delete                 readonly
                         security session limit modify                 readonly
                         security session limit show                   readonly
                         security session show        -username !admin readonly
                         security snmpusers                            none
                         security ssh                                  readonly
                         security ssh add
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssh modify
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssh prepare-to-downgrade             none
                         security ssh remove
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      security ssh show
                                    -vserver !FsxId* -vserver !Cluster all
                         security ssl
                                    -vserver !FsxId* -vserver !Cluster all
                         set                                           all
                         sleep                                         all
                         snaplock   -vserver !FsxId* -vserver !Cluster all
                         snaplock compliance-clock                     all
                         snapmirror abort                              all
                         snapmirror break                              all
                         snapmirror cache                              all
                         snapmirror check                              all
                         snapmirror create                             all
                         snapmirror delete                             all
                         snapmirror failover                           all
                         snapmirror initialize                         all
                         snapmirror initialize-ls-set                  all
                         snapmirror list-destinations                  all
                         snapmirror list-unprotected                   all
                         snapmirror mediator                           all
                         snapmirror modify                             all
                         snapmirror policy         -policy !FSxPolicy* all
                         snapmirror promote                            all
                         snapmirror protect                            all
                         snapmirror quiesce                            all
                         snapmirror release                            all
                         snapmirror restore                            all
                         snapmirror resume                             all
                         snapmirror resync                             all
                         snapmirror show                               all
                         snapmirror show-capabilities
                                          -endpoint-type !object-store all
                         snapmirror show-history                       all
                         snapmirror snapshot-owner                     all
                         snapmirror update                             all
                         snapmirror update-ls-set                      all
                         statistics aggregate                          readonly
                         statistics catalog
-object client*|ext_cache*|fpolicy*|lun*|nfs*|qtree*|volume*|workload_volume
                                                                       readonly
                         statistics lif                                readonly
                         statistics lun                                readonly
                         statistics qtree                              readonly
                         statistics samples         -sample-id !FsxId* all
                         statistics show
-object client*|ext_cache*|fpolicy*|lun*|nfs*|qtree*|volume*|workload_volume
                                                                       readonly
                         statistics show-periodic                      readonly
                         statistics start           -sample-id !FsxId* all
                         statistics stop            -sample-id !FsxId* all
                         statistics volume show         -volume !vol0* readonly
                         statistics vserver show
                                    -vserver !FsxId* -vserver !Cluster readonly
                         statistics-v1                                 readonly
                         storage aggregate show-efficiency             readonly
                         storage aggregate show-space
                                                    -aggregate !aggr0* all
                         storage-service                               none

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      system                                        none
                         system node virtual-machine instance show-settings
                                                                       readonly
                         system services firewall policy
                                    -vserver !FsxId* -vserver !Cluster readonly
                         system services firewall policy service       none
                         timezone                                      all
                         version                                       readonly
                         volume analytics
                                    -vserver !FsxId* -vserver !Cluster all
                         volume autosize
                                    -vserver !FsxId* -vserver !Cluster all
                         volume clone
                                    -vserver !FsxId* -vserver !Cluster all
                         volume clone sharing-by-split undo start-all  all
                         volume conversion
                                    -vserver !FsxId* -vserver !Cluster all
                         volume create
                                    -vserver !FsxId* -vserver !Cluster all
                         volume delete
                                    -vserver !FsxId* -vserver !Cluster all
                         volume destroy
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency check
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency inactive-data-compression   none
                         volume efficiency modify
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency off
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency on
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency policy
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency prepare-to-downgrade        none
                         volume efficiency promote
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency revert-to                   none
                         volume efficiency show
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency start
                    -vserver !FsxId* -vserver !Cluster -scan-all false all
                         volume efficiency stat                        readonly
                         volume efficiency stop
                                    -vserver !FsxId* -vserver !Cluster all
                         volume efficiency undo
                                    -vserver !FsxId* -vserver !Cluster all
                         volume encryption
                                    -vserver !FsxId* -vserver !Cluster all
                         volume encryption modify-enc-blob             none
                         volume encryption retry-online                all
                         volume encryption secure-purge show-version   all
                         volume expand
                                    -vserver !FsxId* -vserver !Cluster all
                         volume file
                                    -vserver !FsxId* -vserver !Cluster all
                         volume file async-delete prepare-for-revert   none
                         volume file clone split load                  all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      volume file clone token                       all
                         volume file copy show
                -source-vserver-id !FsxId* -source-vserver-id !Cluster readonly
                         volume file fingerprint abort                 none
                         volume file fingerprint dump                  none
                         volume file move show
                -source-vserver-id !FsxId* -source-vserver-id !Cluster readonly
                         volume file source                            none
                         volume flexcache                              all
                         volume flexcache prepare-to-downgrade         none
                         volume flexgroup
                                    -vserver !FsxId* -vserver !Cluster all
                         volume flexgroup config modify                all
                         volume flexgroup config show                  all
                         volume language
                                    -vserver !FsxId* -vserver !Cluster all
                         volume make-vsroot
                                    -vserver !FsxId* -vserver !Cluster all
                         volume managed-feature                        readonly
                         volume modify
                                    -vserver !FsxId* -vserver !Cluster all
                         volume mount                                  all
                         volume move                                   none
                         volume offline
                                    -vserver !FsxId* -vserver !Cluster all
                         volume online
                                    -vserver !FsxId* -vserver !Cluster all
                         volume qtree                                  all
                         volume quota                                  all
                         volume reallocation
                                    -vserver !FsxId* -vserver !Cluster all
                         volume reallocation off                       all
                         volume reallocation on                        all
                         volume recovery-queue
                                    -vserver !FsxId* -vserver !Cluster all
                         volume rehost
                                    -vserver !FsxId* -vserver !Cluster all
                         volume remove-junction
                                    -vserver !FsxId* -vserver !Cluster all
                         volume rename                                 all
                         volume restrict
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show-footprint
                                    -vserver !FsxId* -vserver !Cluster all
                         volume show-space
                                    -vserver !FsxId* -vserver !Cluster all
                         volume size
                                    -vserver !FsxId* -vserver !Cluster all
                         volume snaplock
                                    -vserver !FsxId* -vserver !Cluster all
                         volume snaplock prepare-to-downgrade          none
                         volume snapshot
                                    -vserver !FsxId* -vserver !Cluster all
                         volume snapshot event-config modify           readonly
                         volume snapshot event-config show             readonly
                         volume snapshot policy                        all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      volume snapshot prepare-for-revert            none
                         volume snapshot snapdb size                   none
                         volume unmount                                all
                         vserver active-directory
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver add-aggregates                        none
                         vserver add-protocols
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver audit
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver audit prepare-to-downgrade            none
                         vserver check
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver cifs
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver cifs branchcache log                  all
                         vserver cifs cache show-count                 all
                         vserver cifs prepare-to-downgrade             none
                         vserver cifs security-encryption-required-dc-connections-prepare-to-downgrade
                                                                       none
                         vserver cifs stat                             all
                         vserver config                                none
                         vserver config-replication
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver context                               all
                         vserver copy-offload                          all
                         vserver create
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver create-sync-destination
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver export-policy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver fcp                                   none
                         vserver fpolicy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver http prepare-to-downgrade             none
                         vserver http-proxy
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver iscsi
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver iscsi security prepare-to-downgrade   none
                         vserver locks
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver modify
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver name-mapping
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver nfs
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver nfs client                            all
                         vserver nfs credentials count                 all
                         vserver nfs prepare-for-v3-ms-dos-client-downgrade
                                                                       none
                         vserver nfs prepare-to-downgrade              none
                         vserver nvme                                  none
                         vserver object-store-server
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver options
-option-name replication.throttle.incoming.max_kbs|replication.throttle.outgoing.max_kbs
                                                                       all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      vserver peer
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver peer modify-local-name
                                  -new-name !FsxId* -new-name !Cluster all
                         vserver peer repeer                           all
                         vserver peer transition
                        -local-vserver !FsxId* -local-vserver !Cluster all
                         vserver prepare-for-revert                    none
                         vserver remove-aggregates                     none
                         vserver remove-protocols
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver rename                                none
                         vserver restamp-msid
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver san                                   none
                         vserver security
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver services
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver services access-check server-discovery show-host
                                                                       all
                         vserver services name-service cache settings modify
                                                                       all
                         vserver services name-service cache settings show
                                                                       all
                         vserver services name-service cache show-count
                                                                       all
                         vserver services name-service dns dynamic-update prepare-to-downgrade
                                                                       none
                         vserver services name-service unix-group max-limit
                                                                       all
                         vserver services name-service unix-user max-limit
                                                                       all
                         vserver services name-service ypbind restart  all
                         vserver services name-service ypbind status   all
                         vserver services ndmp extensions modify       all
                         vserver services ndmp extensions show         all
                         vserver services web access
                              -role !admin -role !none -role !readonly readonly
                         vserver show
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver show-aggregates
                                    -vserver !FsxId* -vserver !Cluster readonly
                         vserver show-protocols
                                    -vserver !FsxId* -vserver !Cluster readonly
                         vserver smtape
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver snapdiff-rpc-server
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver start
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver stop
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver unlock
                                    -vserver !FsxId* -vserver !Cluster all
                         vserver vscan
                                    -vserver !FsxId* -vserver !Cluster all

           Role          Command/                                      Access
Vserver    Name          Directory                               Query Level
---------- ------------- --------- ----------------------------------- --------
FsxId0a0bc0790c854e078
           fsxadmin      vserver vsmd
                                    -vserver !FsxId* -vserver !Cluster all
                         vvol                                          none
319 entries were displayed.

FsxId0a0bc0790c854e078::>

REST APIとONTAP CLIのコマンドのリスト

場合によってはONTAP CLIではなく、REST APIを叩きたい時もあると思います。

その場合は、security login role show-ontapiを実行することで、REST APIとONTAP CLIのコマンドのリストを表示することで、REST APIとONTAP CLIのコマンドの関連性を確認することができます。

FsxId0a0bc0790c854e078::> security login role show-ontapi
ONTAPI                      Command
--------------------------- ---------------------------------------------------
active-directory-account-create
                            vserver active-directory create
active-directory-account-delete
                            vserver active-directory delete
active-directory-account-get-iter
                            vserver active-directory show
active-directory-account-modify
                            vserver active-directory modify
active-directory-account-password-change
                            vserver active-directory password-change
active-directory-account-password-reset
                            vserver active-directory password-reset
aggr-efficiency-get-iter    storage aggregate show-efficiency
aggr-space-get-iter         storage aggregate show-space
application-provisioning-lun-start
                            lun create
application-provisioning-volume-start
                            volume create
audit-log-get               security audit log show
audit-log-get-iter          security audit log show
cache-policy-get            qos settings cache show
cache-policy-get-iter       qos settings cache show
cache-policy-modify         qos settings cache modify
cache-policy-modify-iter    qos settings cache modify
cg-commit                   volume snapshot create
cg-start                    volume snapshot create
cifs-branchcache-create     vserver cifs branchcache create
cifs-branchcache-flush      vserver cifs branchcache hash-flush
cifs-branchcache-get        vserver cifs branchcache show
cifs-branchcache-get-iter   vserver cifs branchcache show
cifs-branchcache-hash       vserver cifs branchcache hash-create
cifs-branchcache-modify     vserver cifs branchcache modify
cifs-branchcache-remove     vserver cifs branchcache delete
cifs-character-mapping-create
                            vserver cifs character-mapping create
cifs-character-mapping-destroy
                            vserver cifs character-mapping delete
cifs-character-mapping-get-iter
                            vserver cifs character-mapping show
cifs-character-mapping-modify
                            vserver cifs character-mapping modify
cifs-check-server-get-iter  vserver cifs check
cifs-connection-get-iter    vserver cifs connection show
cifs-domain-discovered-servers-get-iter
                            vserver cifs domain discovered-servers show
cifs-domain-discovered-servers-reset
                            vserver cifs domain discovered-servers
                            reset-servers
cifs-domain-name-mapping-search-add
                            vserver cifs domain name-mapping-search add
cifs-domain-name-mapping-search-get-iter
                            vserver cifs domain name-mapping-search show
cifs-domain-name-mapping-search-modify
                            vserver cifs domain name-mapping-search modify
cifs-domain-name-mapping-search-remove
                            vserver cifs domain name-mapping-search remove
cifs-domain-password-schedule-get-iter
                            vserver cifs domain password schedule show
cifs-domain-password-schedule-modify
                            vserver cifs domain password schedule modify
cifs-domain-preferred-dc-add
                            vserver cifs domain preferred-dc add
cifs-domain-preferred-dc-get-iter
                            vserver cifs domain preferred-dc show
cifs-domain-preferred-dc-remove
                            vserver cifs domain preferred-dc remove
cifs-domain-trusts-get-iter vserver cifs domain trusts show
cifs-domain-trusts-rediscover
                            vserver cifs domain trusts rediscover
cifs-home-directory-get-iter
                            vserver cifs home-directory show
cifs-home-directory-modify  vserver cifs home-directory modify
cifs-home-directory-search-path-add
                            vserver cifs home-directory search-path add

ONTAPI                      Command
--------------------------- ---------------------------------------------------
cifs-home-directory-search-path-delete
                            vserver cifs home-directory search-path remove
cifs-home-directory-search-path-get-iter
                            vserver cifs home-directory search-path show
cifs-home-directory-search-path-remove
                            vserver cifs home-directory search-path remove
cifs-home-directory-search-path-reorder
                            vserver cifs home-directory search-path reorder
cifs-local-group-create     vserver cifs users-and-groups local-group create
cifs-local-group-delete     vserver cifs users-and-groups local-group delete
cifs-local-group-get-iter   vserver cifs users-and-groups local-group show
cifs-local-group-members-add-members
                            vserver cifs users-and-groups local-group
                            add-members
cifs-local-group-members-get-iter
                            vserver cifs users-and-groups local-group
                            show-members
cifs-local-group-members-remove-members
                            vserver cifs users-and-groups local-group
                            remove-members
cifs-local-group-modify     vserver cifs users-and-groups local-group modify
cifs-local-group-rename     vserver cifs users-and-groups local-group rename
cifs-local-user-create      vserver cifs users-and-groups local-user create
cifs-local-user-delete      vserver cifs users-and-groups local-user delete
cifs-local-user-get-iter    vserver cifs users-and-groups local-user show
cifs-local-user-membership-get-iter
                            vserver cifs users-and-groups local-user
                            show-membership
cifs-local-user-modify      vserver cifs users-and-groups local-user modify
cifs-local-user-rename      vserver cifs users-and-groups local-user rename
cifs-local-user-set-password
                            vserver cifs users-and-groups local-user
                            set-password
cifs-nbtstat-get-iter       vserver cifs nbtstat
cifs-options-get-iter       vserver cifs options show
cifs-options-modify         vserver cifs options modify
cifs-password-change        vserver cifs domain password change
cifs-password-reset         vserver cifs domain password reset
cifs-preferred-dc-check-get-iter
                            vserver cifs domain preferred-dc check
cifs-privilege-add-privilege
                            vserver cifs users-and-groups privilege
                            add-privilege
cifs-privilege-get-iter     vserver cifs users-and-groups privilege show
cifs-privilege-remove-privilege
                            vserver cifs users-and-groups privilege
                            remove-privilege
cifs-privilege-reset-privilege
                            vserver cifs users-and-groups privilege
                            reset-privilege
cifs-security-get-iter      vserver cifs security show
cifs-security-modify        vserver cifs security modify
cifs-server-add-netbios-aliases
                            vserver cifs add-netbios-aliases
cifs-server-create          vserver cifs create
cifs-server-delete          vserver cifs delete
cifs-server-get-iter        vserver cifs show
cifs-server-modify          vserver cifs modify
cifs-server-remove-netbios-aliases
                            vserver cifs remove-netbios-aliases
cifs-server-start           vserver cifs start
cifs-server-stop            vserver cifs stop
cifs-session-close          vserver cifs session remove
cifs-session-file-close     vserver cifs session file remove
cifs-session-file-get-iter  vserver cifs session file show
cifs-session-get-iter       vserver cifs session show
cifs-share-access-control-create
                            vserver cifs share access-control create
cifs-share-access-control-delete
                            vserver cifs share access-control delete
cifs-share-access-control-get-iter
                            vserver cifs share access-control show
cifs-share-access-control-modify
                            vserver cifs share access-control modify

ONTAPI                      Command
--------------------------- ---------------------------------------------------
cifs-share-create           vserver cifs share create
cifs-share-delete           vserver cifs share delete
cifs-share-get-iter         vserver cifs share show
cifs-share-modify           vserver cifs share modify
cifs-symlink-create         vserver cifs symlink create
cifs-symlink-delete         vserver cifs symlink delete
cifs-symlink-get-iter       vserver cifs symlink show
cifs-symlink-modify         vserver cifs symlink modify
cifs-user-home-directory-path-get
                            vserver cifs home-directory show-user
cifs-user-home-directory-path-get-iter
                            vserver cifs home-directory show-user
cifs-users-and-group-local-group-members-get-iter
                            vserver cifs users-and-groups local-group
                            show-members
cifs-users-and-group-local-user-membership-get-iter
                            vserver cifs users-and-groups local-user
                            show-membership
clock-get-timezone          timezone
clone-autodelete            volume file clone autodelete
clone-autodelete-status     volume file clone show-autodelete
clone-create                volume file clone create
clone-deletion-add-extension
                            volume file clone deletion add-extension
clone-deletion-get-iter     volume file clone deletion show
clone-deletion-minimum-size volume file clone deletion modify
clone-deletion-remove-extension
                            volume file clone deletion remove-extension
clone-split-load-get-iter   volume file clone split load show
cluster-identity-get        cluster identity show
cluster-log-forward-create  cluster log-forwarding create
cluster-log-forward-destroy cluster log-forwarding delete
cluster-log-forward-get     cluster log-forwarding show
cluster-log-forward-get-iter
                            cluster log-forwarding show
cluster-log-forward-modify  cluster log-forwarding modify
cluster-peer-authn-offer-cancel
                            cluster peer offer cancel
cluster-peer-authn-offer-get
                            cluster peer offer show
cluster-peer-authn-offer-get-iter
                            cluster peer offer show
cluster-peer-authn-offer-modify
                            cluster peer offer modify
cluster-peer-connections-get
                            cluster peer connection show
cluster-peer-connections-get-iter
                            cluster peer connection show
cluster-peer-create         cluster peer create
cluster-peer-delete         cluster peer delete
cluster-peer-get            cluster peer show
cluster-peer-get-iter       cluster peer show
cluster-peer-health-info-get
                            cluster peer health show
cluster-peer-health-info-get-iter
                            cluster peer health show
cluster-peer-modify         cluster peer modify
cluster-peer-modify-local-name
                            cluster peer modify-local-name
cluster-peer-ping-iter      cluster peer ping
cluster-peer-policy-get     cluster peer policy show
cluster-peer-policy-modify  cluster peer policy modify
ems-autosupport-log         event generate-autosupport-log
export-check-access-get-iter
                            vserver export-policy check-access
export-policy-create        vserver export-policy create
export-policy-destroy       vserver export-policy delete
export-policy-get           vserver export-policy show
export-policy-get-iter      vserver export-policy show
export-policy-rename        vserver export-policy rename
export-rule-add-clientmatches
                            vserver export-policy rule add-clientmatches

ONTAPI                      Command
--------------------------- ---------------------------------------------------
export-rule-create          vserver export-policy rule create
export-rule-destroy         vserver export-policy rule delete
export-rule-get             vserver export-policy rule show
export-rule-get-create-defaults
                            vserver export-policy rule create
export-rule-get-iter        vserver export-policy rule show
export-rule-modify          vserver export-policy rule modify
export-rule-remove-clientmatches
                            vserver export-policy rule remove-clientmatches
export-rule-set-index       vserver export-policy rule setindex
exports-access-cache-all-vservers-get
                            vserver export-policy access-cache config
                            show-all-vservers
exports-access-cache-all-vservers-modify
                            vserver export-policy access-cache config
                            modify-all-vservers
exports-access-cache-config-get
                            vserver export-policy access-cache config show
exports-access-cache-config-get-iter
                            vserver export-policy access-cache config show
exports-access-cache-config-modify
                            vserver export-policy access-cache config modify
external-restore-get-iter   security key-manager external restore
external-status-get-iter    security key-manager external show-status
feature-status-list-info    volume show
file-assign-qos             volume file modify
file-compact-data           volume file compact-data
file-create-directory       volume file show-disk-usage
file-create-symlink         volume file show-disk-usage
file-delete-directory       volume file show-disk-usage
file-delete-file            volume file show-disk-usage
file-directory-effective-permissions-get
                            vserver security file-directory
                            show-effective-permissions
file-directory-security-get vserver security file-directory show
file-directory-security-ntfs-create
                            vserver security file-directory ntfs create
file-directory-security-ntfs-dacl-add
                            vserver security file-directory ntfs dacl add
file-directory-security-ntfs-dacl-get-iter
                            vserver security file-directory ntfs dacl show
file-directory-security-ntfs-dacl-modify
                            vserver security file-directory ntfs dacl modify
file-directory-security-ntfs-dacl-remove
                            vserver security file-directory ntfs dacl remove
file-directory-security-ntfs-delete
                            vserver security file-directory ntfs delete
file-directory-security-ntfs-get-iter
                            vserver security file-directory ntfs show
file-directory-security-ntfs-modify
                            vserver security file-directory ntfs modify
file-directory-security-ntfs-sacl-add
                            vserver security file-directory ntfs sacl add
file-directory-security-ntfs-sacl-get-iter
                            vserver security file-directory ntfs sacl show
file-directory-security-ntfs-sacl-modify
                            vserver security file-directory ntfs sacl modify
file-directory-security-ntfs-sacl-remove
                            vserver security file-directory ntfs sacl remove
file-directory-security-policy-create
                            vserver security file-directory policy create
file-directory-security-policy-delete
                            vserver security file-directory policy delete
file-directory-security-policy-get-iter
                            vserver security file-directory policy show
file-directory-security-policy-task-add
                            vserver security file-directory policy task add
file-directory-security-policy-task-get-iter
                            vserver security file-directory policy task show
file-directory-security-policy-task-modify
                            vserver security file-directory policy task modify
file-directory-security-policy-task-remove
                            vserver security file-directory policy task remove

ONTAPI                      Command
--------------------------- ---------------------------------------------------
file-directory-security-remove-slag
                            vserver security file-directory remove-slag
file-directory-security-set vserver security file-directory apply
file-fingerprint-get-iter   volume file fingerprint show
file-fingerprint-start      volume file fingerprint start
file-get-file-info          volume file show-disk-usage
file-get-space-reservation-info
                            volume show
file-hole-range-query-iter  volume file show-disk-usage
file-inode-info-get-iter    volume file show-inode
file-list-directory-iter    volume file show-disk-usage
file-punch-hole-iter        volume file show-disk-usage
file-read-file              volume file show-disk-usage
file-read-symlink           volume file show-disk-usage
file-rename-file            volume file show-disk-usage
file-set-space-reservation-info
                            volume file reservation
file-truncate-file          volume file show-disk-usage
file-usage-get              volume file show-disk-usage
file-usage-result-get       volume file show-disk-usage
file-usage-start            volume file show-disk-usage
file-write-file             volume file show-disk-usage
fileservice-audit-config-create
                            vserver audit create
fileservice-audit-config-get
                            vserver audit show
fileservice-audit-config-get-iter
                            vserver audit show
fileservice-audit-config-get-total-records
                            vserver audit show
fileservice-audit-config-modify
                            vserver audit modify
fileservice-audit-disable   vserver audit disable
fileservice-audit-enable    vserver audit enable
fileservice-audit-remove    vserver audit delete
fileservice-audit-rotate-log
                            vserver audit rotate-log
flexcache-connected-cache-get-iter
                            volume flexcache origin show-caches
flexcache-create-async      volume flexcache create
flexcache-default-size-get  volume flexcache show
flexcache-destroy-async     volume flexcache delete
flexcache-get-iter          volume flexcache show
flexcache-usage-get         volume flexcache show
fpolicy-disable-policy      vserver fpolicy disable
fpolicy-enable-policy       vserver fpolicy enable
fpolicy-passthrough-read-connection-get-iter
                            vserver fpolicy show-passthrough-read-connection
fpolicy-policy-create       vserver fpolicy policy create
fpolicy-policy-delete       vserver fpolicy policy delete
fpolicy-policy-event-create vserver fpolicy policy event create
fpolicy-policy-event-delete vserver fpolicy policy event delete
fpolicy-policy-event-get-iter
                            vserver fpolicy policy event show
fpolicy-policy-event-modify vserver fpolicy policy event modify
fpolicy-policy-external-engine-create
                            vserver fpolicy policy external-engine create
fpolicy-policy-external-engine-delete
                            vserver fpolicy policy external-engine delete
fpolicy-policy-external-engine-get-iter
                            vserver fpolicy policy external-engine show
fpolicy-policy-external-engine-modify
                            vserver fpolicy policy external-engine modify
fpolicy-policy-get-iter     vserver fpolicy policy show
fpolicy-policy-modify       vserver fpolicy policy modify
fpolicy-policy-scope-create vserver fpolicy policy scope create
fpolicy-policy-scope-delete vserver fpolicy policy scope delete
fpolicy-policy-scope-get-iter
                            vserver fpolicy policy scope show
fpolicy-policy-scope-modify vserver fpolicy policy scope modify
fpolicy-policy-status-get-iter
                            vserver fpolicy show
fpolicy-server-connect      vserver fpolicy engine-connect

ONTAPI                      Command
--------------------------- ---------------------------------------------------
fpolicy-server-disconnect   vserver fpolicy engine-disconnect
fpolicy-server-status-get-iter
                            vserver fpolicy show-engine
gpo-applied-info-get-iter   vserver cifs group-policy show-applied
gpo-get-iter                vserver cifs group-policy show
gpo-gpresult-info-get-iter  vserver cifs group-policy show-defined
gpo-modify                  vserver cifs group-policy modify
gpo-restricted-group-applied-info-get-iter
                            vserver cifs group-policy restricted-group
                            show-applied
gpo-restricted-group-defined-info-get-iter
                            vserver cifs group-policy restricted-group
                            show-defined
gpo-update                  vserver cifs group-policy update
group-mapping-create        vserver show
group-mapping-delete        vserver show
group-mapping-get-iter      vserver show
group-mapping-insert        vserver show
group-mapping-modify        vserver show
group-mapping-swap          vserver show
igroup-add                  lun igroup add
igroup-bind-portset         lun igroup bind
igroup-create               lun igroup create
igroup-destroy              lun igroup delete
igroup-get-iter             lun igroup show
igroup-lookup-lun           lun igroup show
igroup-os-type-list         lun igroup show
igroup-remove               lun igroup remove
igroup-rename               lun igroup rename
igroup-set-attribute        lun igroup set
igroup-unbind-portset       lun igroup unbind
iscsi-auth-add-initiator-address-ranges
                            vserver iscsi security add-initator-address-ranges
iscsi-auth-generate-chap-password
                            vserver iscsi show
iscsi-auth-remove-initiator-address-ranges
                            vserver iscsi security
                            remove-initator-address-ranges
iscsi-connection-get-iter   vserver iscsi connection show
iscsi-initiator-add-auth    vserver iscsi security create
iscsi-initiator-auth-get-iter
                            vserver iscsi security show
iscsi-initiator-delete-auth vserver iscsi security delete
iscsi-initiator-get-auth    vserver iscsi security show
iscsi-initiator-get-default-auth
                            vserver iscsi show
iscsi-initiator-get-iter    vserver iscsi initiator show
iscsi-initiator-modify-chap-params
                            vserver iscsi security modify
iscsi-initiator-set-default-auth
                            vserver iscsi security default
iscsi-interface-accesslist-add
                            vserver iscsi interface accesslist add
iscsi-interface-accesslist-get-iter
                            vserver iscsi interface accesslist show
iscsi-interface-accesslist-remove
                            vserver iscsi interface accesslist remove
iscsi-interface-disable     vserver iscsi interface disable
iscsi-interface-enable      vserver iscsi interface enable
iscsi-interface-get-iter    vserver iscsi interface show
iscsi-interface-modify      vserver iscsi interface modify
iscsi-isns-config           vserver iscsi isns modify
iscsi-isns-create           vserver iscsi isns create
iscsi-isns-destroy          vserver iscsi isns delete
iscsi-isns-get-info         vserver iscsi isns show
iscsi-isns-get-iter         vserver iscsi isns show
iscsi-isns-start            vserver iscsi isns start
iscsi-isns-stop             vserver iscsi isns stop
iscsi-isns-update           vserver iscsi isns update
iscsi-node-get-name         vserver iscsi nodename
iscsi-node-set-name         vserver iscsi nodename
iscsi-service-create        vserver iscsi create
iscsi-service-destroy       vserver iscsi delete

ONTAPI                      Command
--------------------------- ---------------------------------------------------
iscsi-service-get-iter      vserver iscsi show
iscsi-service-modify        vserver iscsi modify
iscsi-service-start         vserver iscsi start
iscsi-service-status        vserver iscsi status
iscsi-service-stop          vserver iscsi stop
iscsi-session-get-iter      vserver iscsi session show
iscsi-target-alias-clear-alias
                            vserver iscsi modify
iscsi-target-alias-get-alias
                            vserver iscsi alias
iscsi-target-alias-set-alias
                            vserver iscsi alias
job-by-node-get             job show-bynode
job-by-node-get-iter        job show-bynode
job-completed-get           job show-completed
job-completed-get-iter      job show-completed
job-get                     job show
job-get-iter                job show
job-history-get             job history show
job-history-get-iter        job history show
job-pause                   job pause
job-pause-iter              job pause
job-resume                  job resume
job-resume-iter             job resume
job-schedule-cron-create    job schedule cron create
job-schedule-cron-destroy   job schedule cron delete
job-schedule-cron-destroy-iter
                            job schedule cron delete
job-schedule-cron-get       job schedule cron show
job-schedule-cron-get-iter  job schedule cron show
job-schedule-cron-modify    job schedule cron modify
job-schedule-get            job schedule show
job-schedule-get-iter       job schedule show
job-schedule-interval-create
                            job schedule interval create
job-schedule-interval-destroy
                            job schedule interval delete
job-schedule-interval-destroy-iter
                            job schedule interval delete
job-schedule-interval-get   job schedule interval show
job-schedule-interval-get-iter
                            job schedule interval show
job-schedule-interval-modify
                            job schedule interval modify
job-stop                    job stop
job-stop-iter               job stop
kerberos-config-get         vserver nfs kerberos interface show
kerberos-config-get-iter    vserver nfs kerberos interface show
kerberos-config-modify      vserver nfs kerberos interface modify
kerberos-realm-create       vserver nfs kerberos realm create
kerberos-realm-delete       vserver nfs kerberos realm delete
kerberos-realm-get-iter     vserver nfs kerberos realm show
kerberos-realm-modify       vserver nfs kerberos realm modify
key-query-get-iter          security key-manager key query
ldap-check-get-iter         vserver services name-service ldap check
ldap-client-create          vserver services name-service ldap client create
ldap-client-delete          vserver services name-service ldap client delete
ldap-client-get-iter        vserver services name-service ldap client show
ldap-client-modify          vserver services name-service ldap client modify
ldap-client-schema-delete   vserver services name-service ldap client schema
                            delete
ldap-client-schema-get-iter vserver services name-service ldap client schema
                            show
ldap-client-schema-modify   vserver services name-service ldap client schema
                            modify
ldap-config-create          vserver services name-service ldap create
ldap-config-delete          vserver services name-service ldap delete
ldap-config-get-iter        vserver services name-service ldap show
ldap-config-modify          vserver services name-service ldap modify
lock-get-iter               vserver locks show
lun-alignment-reset-statistics
                            lun modify
lun-copy-modify             lun copy modify

ONTAPI                      Command
--------------------------- ---------------------------------------------------
lun-copy-pause              lun copy pause
lun-copy-resume             lun copy resume
lun-copy-start              lun copy start
lun-create-by-size          lun create
lun-create-from-file        lun create
lun-destroy                 lun delete
lun-generate-serial         lun create
lun-get-attribute           lun show
lun-get-comment             lun comment
lun-get-inquiry-info        lun show
lun-get-iter                lun show
lun-get-maxsize             lun maxsize
lun-get-minsize             lun show
lun-get-occupied-size       lun show
lun-get-serial-number       lun serial
lun-get-space-reservation-info
                            lun show
lun-get-vdisk-attributes    lun show
lun-has-scsi-reservations   lun show
lun-initiator-logged-in     lun show
lun-lba-hole-range-query    lun show
lun-lba-is-hole             lun show
lun-map                     lun mapping create
lun-map-add-reporting-nodes lun mapping add-reporting-nodes
lun-map-get-iter            lun mapping show
lun-map-list-info           lun mapping show
lun-map-remove-reporting-nodes
                            lun mapping remove-reporting-nodes
lun-move                    lun move-in-volume
lun-move-modify             lun move modify
lun-move-pause              lun move pause
lun-move-resume             lun move resume
lun-move-start              lun move start
lun-offline                 lun offline
lun-online                  lun online
lun-os-type-list            lun show
lun-port-has-scsi-reservations
                            lun show
lun-read-raw                lun modify
lun-resize                  lun resize
lun-set-attribute           lun modify
lun-set-comment             lun comment
lun-set-device-id           lun set dev_id
lun-set-qos-policy-group    lun modify
lun-set-serial-number       lun serial
lun-set-space-alloc         lun modify
lun-set-space-reservation-info
                            lun modify
lun-unmap                   lun mapping delete
lun-unset-attribute         lun modify
lun-unset-device-id         lun modify
lun-write-raw               lun modify
name-mapping-create         vserver name-mapping create
name-mapping-delete         vserver name-mapping delete
name-mapping-get-iter       vserver name-mapping show
name-mapping-insert         vserver name-mapping insert
name-mapping-modify         vserver name-mapping modify
name-mapping-swap           vserver name-mapping swap
name-mapping-unix-group-add-user
                            vserver services name-service unix-group adduser
name-mapping-unix-group-create
                            vserver services name-service unix-group create
name-mapping-unix-group-delete-user
                            vserver services name-service unix-group deluser
name-mapping-unix-group-destroy
                            vserver services name-service unix-group delete
name-mapping-unix-group-get vserver services name-service unix-group show
name-mapping-unix-group-get-iter
                            vserver services name-service unix-group show
name-mapping-unix-group-modify
                            vserver services name-service unix-group modify
name-mapping-unix-user-create
                            vserver services name-service unix-user create

ONTAPI                      Command
--------------------------- ---------------------------------------------------
name-mapping-unix-user-destroy
                            vserver services name-service unix-user delete
name-mapping-unix-user-get  vserver services name-service unix-user show
name-mapping-unix-user-get-iter
                            vserver services name-service unix-user show
name-mapping-unix-user-modify
                            vserver services name-service unix-user modify
name-service-nis-show-bound vserver services name-service nis-domain show-bound
name-service-nis-show-bound-iter
                            vserver services name-service nis-domain show-bound
nameservice-nsswitch-create vserver services name-service ns-switch create
nameservice-nsswitch-destroy
                            vserver services name-service ns-switch delete
nameservice-nsswitch-get    vserver services name-service ns-switch show
nameservice-nsswitch-get-iter
                            vserver services name-service ns-switch show
nameservice-nsswitch-modify vserver services name-service ns-switch modify
ndmp-password-generate      vserver services ndmp generate-password
ndmp-vserver-attributes-get-iter
                            vserver services ndmp show
ndmp-vserver-attributes-modify
                            vserver services ndmp modify
ndmp-vserver-service-disable
                            vserver services ndmp off
ndmp-vserver-service-enable vserver services ndmp on
ndmp-vserver-session-info-get-iter
                            vserver services ndmp status
ndmp-vserver-session-kill   vserver services ndmp killsession
ndmp-vserver-session-kill-all
                            vserver services ndmp kill-all
net-cluster-ping            network ping
net-ddns-get                vserver services name-service dns dynamic-update
                            show
net-ddns-get-iter           vserver services name-service dns dynamic-update
                            show
net-ddns-modify             vserver services name-service dns dynamic-update
                            modify
net-dns-check-get-iter      vserver services name-service dns check
net-dns-create              vserver services name-service dns create
net-dns-get                 vserver services name-service dns show
net-dns-get-iter            vserver services name-service dns show
net-dns-modify              vserver services name-service dns modify
net-failover-group-get      network interface failover-groups show
net-failover-group-get-iter network interface failover-groups show
net-firewall-policy-get     system services firewall policy show
net-firewall-policy-get-iter
                            system services firewall policy show
net-hosts-create            vserver services name-service dns hosts create
net-hosts-destroy           vserver services name-service dns hosts delete
net-hosts-get               vserver services name-service dns hosts show
net-hosts-get-iter          vserver services name-service dns hosts show
net-hosts-modify            vserver services name-service dns hosts modify
net-interface-get           network interface show
net-interface-get-iter      network interface show
net-interface-service-policy-entry-get
                            network interface service-policy show
net-interface-service-policy-entry-get-iter
                            network interface service-policy show
net-interface-service-policy-get
                            network interface service-policy show
net-interface-service-policy-get-iter
                            network interface service-policy show
net-port-broadcast-domain-create
                            network port broadcast-domain create
net-port-broadcast-domain-destroy
                            network port broadcast-domain delete
net-port-broadcast-domain-get
                            network port broadcast-domain show
net-port-broadcast-domain-get-iter
                            network port broadcast-domain show
net-port-broadcast-domain-modify
                            network port broadcast-domain modify
net-port-get                network port show

ONTAPI                      Command
--------------------------- ---------------------------------------------------
net-port-get-iter           network port show
net-routes-create           network route create
net-routes-destroy          network route delete
net-routes-get              network route show
net-routes-get-iter         network route show
net-routes-lifs-get         network route show-lifs
net-routes-lifs-get-iter    network route show-lifs
net-san-lif-placement-get   network interface show
net-subnets-for-broadcast-domain-get
                            network port broadcast-domain show
net-subnets-for-broadcast-domain-get-iter
                            network port broadcast-domain show
net-traceroute6             network traceroute6
netgroups-file-delete       vserver services name-service netgroup file delete
nfs-disable                 vserver nfs off
nfs-enable                  vserver nfs on
nfs-exportfs-append-rules   vserver export-policy rule create
nfs-exportfs-append-rules-2 vserver export-policy rule create
nfs-exportfs-check-permission
                            vserver export-policy rule show
nfs-exportfs-delete-rules   vserver export-policy rule delete
nfs-exportfs-list-rules     vserver export-policy rule show
nfs-exportfs-list-rules-2   vserver export-policy rule show
nfs-exportfs-modify-rule    vserver export-policy rule modify
nfs-exportfs-modify-rule-2  vserver export-policy rule modify
nfs-get-supported-sec-flavors
                            vserver export-policy security-table show
nfs-service-create          vserver nfs create
nfs-service-destroy         vserver nfs delete
nfs-service-get             vserver nfs show
nfs-service-get-create-defaults
                            vserver nfs create
nfs-service-get-iter        vserver nfs show
nfs-service-modify          vserver nfs modify
nfs-status                  vserver nfs status
nis-create                  vserver services name-service nis-domain create
nis-destroy                 vserver services name-service nis-domain delete
nis-get                     vserver services name-service nis-domain show
nis-get-iter                vserver services name-service nis-domain show
nis-modify                  vserver services name-service nis-domain modify
ntp-server-get              cluster time-service ntp server show
ntp-server-get-iter         cluster time-service ntp server show
options-get                 vserver options
options-get-iter            vserver options
options-list-info           vserver options
options-modify-iter         vserver options
options-set                 vserver options
portset-add                 lun portset add
portset-create              lun portset create
portset-destroy             lun portset delete
portset-get-iter            lun portset show
portset-remove              lun portset remove
qos-adaptive-policy-group-create
                            qos adaptive-policy-group create
qos-adaptive-policy-group-delete
                            qos adaptive-policy-group delete
qos-adaptive-policy-group-delete-iter
                            qos adaptive-policy-group delete
qos-adaptive-policy-group-get
                            qos adaptive-policy-group show
qos-adaptive-policy-group-get-iter
                            qos adaptive-policy-group show
qos-adaptive-policy-group-modify
                            qos adaptive-policy-group modify
qos-adaptive-policy-group-modify-iter
                            qos adaptive-policy-group modify
qos-adaptive-policy-group-rename
                            qos adaptive-policy-group rename
qos-policy-group-create     qos policy-group create
qos-policy-group-delete     qos policy-group delete
qos-policy-group-delete-iter
                            qos policy-group delete
qos-policy-group-get        qos policy-group show

ONTAPI                      Command
--------------------------- ---------------------------------------------------
qos-policy-group-get-iter   qos policy-group show
qos-policy-group-modify     qos policy-group modify
qos-policy-group-modify-iter
                            qos policy-group modify
qos-policy-group-rename     qos policy-group rename
qos-workload-delete         qos workload delete
qos-workload-delete-iter    qos workload delete
qos-workload-get            qos workload show
qos-workload-get-iter       qos workload show
qos-workload-modify         qos workload modify
qos-workload-modify-iter    qos workload modify
qtree-create                volume qtree create
qtree-delete                volume qtree delete
qtree-delete-async          volume qtree delete
qtree-list-iter             volume qtree show
qtree-modify                volume qtree modify
qtree-rename                volume qtree rename
quota-add-entry             volume quota policy rule create
quota-delete-entry          volume quota policy rule delete
quota-get-entry             volume quota policy rule show
quota-list-entries-iter     volume quota policy rule show
quota-modify-entry          volume quota policy rule modify
quota-off                   volume quota off
quota-on                    volume quota on
quota-policy-copy           volume quota policy copy
quota-policy-create         volume quota policy create
quota-policy-delete         volume quota policy delete
quota-policy-delete-iter    volume quota policy delete
quota-policy-get-iter       volume quota policy show
quota-policy-rename         volume quota policy rename
quota-policy-rule-count-get volume quota policy rule count show
quota-policy-rule-count-get-iter
                            volume quota policy rule count show
quota-report-iter           volume quota report
quota-resize                volume quota resize
quota-set-entry             volume quota policy rule modify
quota-status                volume quota show
quota-status-iter           volume quota show
security-certificate-ca-issued-get
                            security certificate ca-issued show
security-certificate-ca-issued-get-iter
                            security certificate ca-issued show
security-certificate-create security certificate create
security-certificate-delete security certificate delete
security-certificate-delete-iter
                            security certificate delete
security-certificate-generate-csr
                            security certificate generate-csr
security-certificate-get    security certificate show
security-certificate-get-iter
                            security certificate show
security-certificate-install
                            security certificate install
security-certificate-rename security certificate rename
security-certificate-revoke security certificate ca-issued revoke
security-certificate-sign   security certificate sign
security-key-manager-external-add-servers
                            security key-manager external add-servers
security-key-manager-external-enable
                            security key-manager external enable
security-key-manager-external-get
                            security key-manager external show
security-key-manager-external-get-iter
                            security key-manager external show
security-key-manager-external-modify
                            security key-manager external modify
security-key-manager-external-modify-server
                            security key-manager external modify-server
security-key-manager-external-remove-servers
                            security key-manager external remove-servers
security-key-manager-key-database-create-key
                            security key-manager key create
security-key-manager-key-get-iter
                            security key-manager key show

ONTAPI                      Command
--------------------------- ---------------------------------------------------
security-key-manager-key-store-get-iter
                            security key-manager show-key-store
security-login-create       security login create
security-login-delete       security login delete
security-login-delete-iter  security login delete
security-login-expire-password
                            security login expire-password
security-login-expire-password-iter
                            security login expire-password
security-login-get          security login show
security-login-get-iter     security login show
security-login-lock         security login lock
security-login-modify       security login modify
security-login-modify-iter  security login modify
security-login-modify-password
                            security login password
security-login-role-config-get
                            security login role config show
security-login-role-config-get-iter
                            security login role config show
security-login-role-config-modify
                            security login role config modify
security-login-role-config-modify-iter
                            security login role config modify
security-login-role-create  security login role create
security-login-role-delete  security login role delete
security-login-role-delete-iter
                            security login role delete
security-login-role-get     security login role show
security-login-role-get-iter
                            security login role show
security-login-role-modify  security login role modify
security-login-role-modify-iter
                            security login role modify
security-login-unlock       security login unlock
security-login-whoami       security login whoami
security-session-kill-cli-iter
                            security session kill-cli
security-session-limit-get-iter
                            security session limit show
security-session-running-stats-get-iter
                            security session show
security-ssh-add            security ssh add
security-ssh-get-iter       security ssh show
security-ssh-remove         security ssh remove
security-ssh-reset          security ssh modify
security-ssl-get            security ssl show
security-ssl-get-iter       security ssl show
security-ssl-modify         security ssl modify
security-trace-filter-create
                            vserver security trace filter create
security-trace-filter-delete
                            vserver security trace filter delete
security-trace-filter-get-iter
                            vserver security trace filter show
security-trace-filter-modify
                            vserver security trace filter modify
security-trace-result-delete
                            vserver security trace trace-result delete
security-trace-result-show  vserver security trace trace-result show
sis-disable                 volume efficiency off
sis-disable-async           volume efficiency off
sis-enable                  volume efficiency on
sis-enable-async            volume efficiency on
sis-get                     volume efficiency show
sis-get-iter                volume efficiency show
sis-policy-create           volume efficiency policy create
sis-policy-delete           volume efficiency policy delete
sis-policy-get              volume efficiency policy show
sis-policy-get-iter         volume efficiency policy show
sis-policy-modify           volume efficiency policy modify
sis-set-config              volume efficiency modify

ONTAPI                      Command
--------------------------- ---------------------------------------------------
sis-set-config-async        volume efficiency modify
sis-start                   volume efficiency start
sis-start-async             volume efficiency start
sis-status                  volume efficiency show
sis-stop                    volume efficiency stop
sis-stop-async              volume efficiency stop
snaplock-archive-vserver-log
                            snaplock log file archive
snaplock-create-vserver-log snaplock log create
snaplock-destroy-vserver-log
                            snaplock log delete
snaplock-event-retention-abort
                            snaplock event-retention abort
snaplock-event-retention-apply-start
                            snaplock event-retention apply
snaplock-event-retention-get-iter
                            snaplock event-retention show
snaplock-event-retention-policy-create
                            snaplock event-retention policy create
snaplock-event-retention-policy-destroy
                            snaplock event-retention policy delete
snaplock-event-retention-policy-get-iter
                            snaplock event-retention policy show
snaplock-event-retention-policy-modify
                            snaplock event-retention policy modify
snaplock-file-privileged-delete
                            volume file privileged-delete
snaplock-get-file-retention volume file retention show
snaplock-get-node-compliance-clock
                            snaplock compliance-clock show
snaplock-get-vserver-active-log-files-iter
                            snaplock log file show
snaplock-get-vserver-log-iter
                            snaplock log show
snaplock-legal-hold-abort   snaplock legal-hold abort
snaplock-legal-hold-begin-start
                            snaplock legal-hold begin
snaplock-legal-hold-dump-files-start
                            snaplock legal-hold dump-files
snaplock-legal-hold-dump-litigations-start
                            snaplock legal-hold dump-litigations
snaplock-legal-hold-end-start
                            snaplock legal-hold end
snaplock-legal-hold-get-iter
                            snaplock legal-hold show
snaplock-modify-vserver-log snaplock log modify
snaplock-set-node-compliance-clock
                            snaplock compliance-clock initialize
snaplock-volume-set-privileged-delete
                            volume snaplock set-privileged-delete
snapmirror-abort            snapmirror abort
snapmirror-abort-async      snapmirror abort
snapmirror-abort-iter       snapmirror abort
snapmirror-break            snapmirror break
snapmirror-break-async      snapmirror break
snapmirror-break-iter       snapmirror break
snapmirror-create           snapmirror create
snapmirror-destroy          snapmirror delete
snapmirror-destroy-async    snapmirror delete
snapmirror-destroy-iter     snapmirror delete
snapmirror-get              snapmirror show
snapmirror-get-destination  snapmirror list-destinations
snapmirror-get-destination-iter
                            snapmirror list-destinations
snapmirror-get-iter         snapmirror show
snapmirror-get-total-records
                            snapmirror show
snapmirror-history-get      snapmirror show-history
snapmirror-history-get-iter snapmirror show-history
snapmirror-infinite-volume-validate-dp-layout
                            volume show
snapmirror-initialize       snapmirror initialize
snapmirror-initialize-iter  snapmirror initialize

ONTAPI                      Command
--------------------------- ---------------------------------------------------
snapmirror-initialize-ls-set
                            snapmirror initialize-ls-set
snapmirror-modify           snapmirror modify
snapmirror-modify-iter      snapmirror modify
snapmirror-policy-add-rule  snapmirror policy add-rule
snapmirror-policy-create    snapmirror policy create
snapmirror-policy-delete    snapmirror policy delete
snapmirror-policy-get       snapmirror policy show
snapmirror-policy-get-iter  snapmirror policy show
snapmirror-policy-modify    snapmirror policy modify
snapmirror-policy-modify-rule
                            snapmirror policy modify-rule
snapmirror-policy-remove-rule
                            snapmirror policy remove-rule
snapmirror-promote          snapmirror promote
snapmirror-promote-iter     snapmirror promote
snapmirror-protect          snapmirror protect
snapmirror-quiesce          snapmirror quiesce
snapmirror-quiesce-iter     snapmirror quiesce
snapmirror-release          snapmirror release
snapmirror-release-iter     snapmirror release
snapmirror-restore          snapmirror restore
snapmirror-resume           snapmirror resume
snapmirror-resume-iter      snapmirror resume
snapmirror-resync           snapmirror resync
snapmirror-resync-iter      snapmirror resync
snapmirror-snapshot-owner-create
                            snapmirror snapshot-owner create
snapmirror-snapshot-owner-destroy
                            snapmirror snapshot-owner delete
snapmirror-snapshot-owner-get
                            snapmirror snapshot-owner show
snapmirror-snapshot-owner-get-snapshots
                            snapmirror snapshot-owner show
snapmirror-update           snapmirror update
snapmirror-update-iter      snapmirror update
snapmirror-update-ls-set    snapmirror update-ls-set
snapshot-autodelete-list-info
                            volume show
snapshot-autodelete-set-option
                            volume modify
snapshot-create             volume snapshot create
snapshot-create-async       volume snapshot create
snapshot-delete             volume snapshot delete
snapshot-delete-async       volume snapshot delete
snapshot-delta-info         volume snapshot show
snapshot-get-iter           volume snapshot show
snapshot-get-reserve        volume show
snapshot-get-schedule       volume snapshot policy show
snapshot-list-info          volume snapshot show
snapshot-modify-iter        volume snapshot modify
snapshot-modify-snaplock-expiry-time
                            volume snapshot modify-snaplock-expiry-time
snapshot-multicreate        volume snapshot show
snapshot-multicreate-validate
                            volume snapshot show
snapshot-multidelete        volume snapshot show
snapshot-multirename        volume snapshot show
snapshot-partial-restore-file
                            volume snapshot partial-restore-file
snapshot-partial-restore-file-list-info
                            volume snapshot partial-restore-file
snapshot-policy-add-schedule
                            volume snapshot policy add-schedule
snapshot-policy-create      volume snapshot policy create
snapshot-policy-delete      volume snapshot policy delete
snapshot-policy-get         volume snapshot policy show
snapshot-policy-get-iter    volume snapshot policy show
snapshot-policy-modify      volume snapshot policy modify
snapshot-policy-modify-schedule
                            volume snapshot policy modify-schedule
snapshot-policy-remove-schedule
                            volume snapshot policy remove-schedule

ONTAPI                      Command
--------------------------- ---------------------------------------------------
snapshot-reclaimable-info   volume snapshot compute-reclaimable
snapshot-rename             volume snapshot rename
snapshot-reserve-list-info  volume show
snapshot-restore-file       volume snapshot restore-file
snapshot-restore-file-info  volume snapshot restore-file
snapshot-restore-volume     volume snapshot restore
snapshot-restore-volume-async
                            volume snapshot restore
snapshot-set-reserve        volume modify
snapshot-volume-info        volume show
system-api-get-elements     security login role show-ontapi
system-api-list             security login role show-ontapi
system-api-list-types       security login role show-ontapi
system-get-ontapi-version   version
system-get-version          version
volume-autosize-get         volume show
volume-autosize-set         volume modify
volume-autosize-set-async   volume modify
volume-charmap-get          vserver cifs character-mapping show
volume-charmap-set          vserver cifs character-mapping modify
volume-clone-create         volume clone create
volume-clone-create-async   volume clone create
volume-clone-get            volume clone show
volume-clone-get-iter       volume clone show
volume-clone-split-estimate volume clone show
volume-clone-split-start    volume clone split start
volume-clone-split-status   volume clone show
volume-clone-split-stop     volume clone split stop
volume-container            volume show
volume-create               volume create
volume-create-async         volume create
volume-destroy              volume destroy
volume-destroy-async        volume destroy
volume-encryption-conversion-get-iter
                            volume encryption conversion show
volume-encryption-conversion-pause
                            volume encryption conversion pause
volume-encryption-conversion-resume
                            volume encryption conversion resume
volume-encryption-conversion-start
                            volume encryption conversion start
volume-encryption-rekey-get-iter
                            volume encryption rekey show
volume-encryption-rekey-pause
                            volume encryption rekey pause
volume-encryption-rekey-resume
                            volume encryption rekey resume
volume-encryption-rekey-start
                            volume encryption rekey start
volume-expand-async         volume expand
volume-flexgroup-capacity-tier-footprint-get-iter
                            volume show
volume-flexgroup-get-create-limits
                            volume show
volume-flexgroup-get-expand-limits
                            volume show
volume-flexgroup-get-resize-limits
                            volume show
volume-footprint-get-iter   volume show-footprint
volume-get-iter             volume show
volume-get-language         volume show
volume-get-limits           volume show
volume-get-root-name        volume show
volume-get-snaplock-attrs   volume snaplock show
volume-get-volume-path      volume show
volume-modify-iter          volume modify
volume-modify-iter-async    volume modify
volume-mount                volume mount
volume-offline              volume offline
volume-offline-async        volume offline
volume-online               volume online
volume-online-async         volume online
volume-options-list-info    volume show

ONTAPI                      Command
--------------------------- ---------------------------------------------------
volume-rehost               volume rehost
volume-rename               volume rename
volume-rename-async         volume rename
volume-restrict             volume restrict
volume-restrict-async       volume restrict
volume-set-option           volume modify
volume-set-snaplock-attrs   volume snaplock modify
volume-set-total-files      volume modify
volume-size                 volume size
volume-size-async           volume size
volume-space-get-iter       volume show-space
volume-tiering-policies-list
                            volume show
volume-unmount              volume unmount
vscan-active-scanner-pool-get-iter
                            vserver vscan scanner-pool show-active
vscan-connection-status-all-get-iter
                            vserver vscan connection-status show-all
vscan-on-access-policy-create
                            vserver vscan on-access-policy create
vscan-on-access-policy-delete
                            vserver vscan on-access-policy delete
vscan-on-access-policy-get-iter
                            vserver vscan on-access-policy show
vscan-on-access-policy-modify
                            vserver vscan on-access-policy modify
vscan-on-access-policy-status-modify
                            vserver vscan on-access-policy enable
vscan-on-demand-report-delete
                            vserver vscan on-demand-task report delete
vscan-on-demand-report-get-iter
                            vserver vscan on-demand-task report show
vscan-on-demand-task-create vserver vscan on-demand-task create
vscan-on-demand-task-delete vserver vscan on-demand-task delete
vscan-on-demand-task-get-iter
                            vserver vscan on-demand-task show
vscan-on-demand-task-modify vserver vscan on-demand-task modify
vscan-on-demand-task-run    vserver vscan on-demand-task run
vscan-reset                 vserver vscan reset
vscan-resolve-hostnames     vserver vscan scanner-pool resolve-hostnames
vscan-scanner-pool-apply-policy
                            vserver vscan scanner-pool apply-policy
vscan-scanner-pool-create   vserver vscan scanner-pool create
vscan-scanner-pool-delete   vserver vscan scanner-pool delete
vscan-scanner-pool-get-iter vserver vscan scanner-pool show
vscan-scanner-pool-modify   vserver vscan scanner-pool modify
vscan-status-get-iter       vserver vscan show
vscan-status-modify         vserver vscan enable
vserver-add-protocols       vserver add-protocols
vserver-create              vserver create
vserver-create-async        vserver create
vserver-data-policy-export  vserver show
vserver-data-policy-import  vserver show
vserver-data-policy-validation-get-error
                            vserver show
vserver-get                 vserver show
vserver-get-iter            vserver show
vserver-http-proxy-create   vserver http-proxy create
vserver-http-proxy-delete   vserver http-proxy delete
vserver-http-proxy-get      vserver http-proxy show
vserver-http-proxy-get-iter vserver http-proxy show
vserver-http-proxy-modify   vserver http-proxy modify
vserver-login-banner-get    security login banner show
vserver-login-banner-get-iter
                            security login banner show
vserver-login-banner-modify security login banner modify
vserver-login-banner-modify-iter
                            security login banner modify
vserver-modify              vserver modify
vserver-modify-iter         vserver modify
vserver-motd-get            security login motd show
vserver-motd-get-iter       security login motd show
vserver-motd-modify         security login motd modify

ONTAPI                      Command
--------------------------- ---------------------------------------------------
vserver-motd-modify-iter    security login motd modify
vserver-peer-accept         vserver peer accept
vserver-peer-create         vserver peer create
vserver-peer-delete         vserver peer delete
vserver-peer-get            vserver peer show
vserver-peer-get-iter       vserver peer show
vserver-peer-modify         vserver peer modify
vserver-peer-modify-local-name
                            vserver peer modify-local-name
vserver-peer-permission-create
                            vserver peer permission create
vserver-peer-permission-delete
                            vserver peer permission delete
vserver-peer-permission-get vserver peer permission show
vserver-peer-permission-get-iter
                            vserver peer permission show
vserver-peer-permission-modify
                            vserver peer permission modify
vserver-peer-reject         vserver peer reject
vserver-peer-resume         vserver peer resume
vserver-peer-suspend        vserver peer suspend
vserver-peer-transition-create
                            vserver peer transition create
vserver-peer-transition-destroy
                            vserver peer transition delete
vserver-peer-transition-destroy-iter
                            vserver peer transition delete
vserver-peer-transition-get vserver peer transition show
vserver-peer-transition-get-iter
                            vserver peer transition show
vserver-peer-transition-modify
                            vserver peer transition modify
vserver-remove-protocols    vserver remove-protocols
vserver-show-aggr-get-iter  vserver show-aggregates
vserver-start               vserver start
vserver-stop                vserver stop
wafl-get-sync-status        volume show
wafl-sync                   volume modify
894 entries were displayed.

FsxId0a0bc0790c854e078::>


メンテナンス後にサポートしているONTAP CLIを確認するクセをつけよう

FSx for ONTAPがサポートしているONTAP CLIのコマンドを確認してみました。

恐らくメンテナンスのタイミングでサポートされるONTAP CLIが更新されると考えます。メンテナンス後にサポートされているONTAP CLIを確認して差分を確認するクセをつけると思わぬ発見をするかもしれません。

この記事が誰かの助けになれば幸いです。

以上、AWS事業本部 コンサルティング部の のんピ(@non____97)でした!

Share this article

facebook logohatena logotwitter logo

© Classmethod, Inc. All rights reserved.