HPE SimpliVity PowerShell Module Rights

[Q_M13]

Hi,

I was doing some powershell scripting on my symplivity infrastructure and realized that some commands didn't need the same rights level.
I use a read-only account on my vcenter and I can connect to my OVC, run certain commands like Get-SVThost and Get-SVTvm but not Get-SVTBackup!!!
I get an error message :
PS C:\Scripts> Get-SVTbackup -BackupState FAILED -CreatedAfter $LastWeek
Runtime error: Not in an HPE SimpliVity role that is authorized to perform the requested action or view the requested information

when I play it with the admininistrator@vsphere.local account it works.

Have you any idea of the rights I need to add to run that command ????

Thanks all

[Sanika]

Hi Q_M13,

I see you faced permission issues while running the PowerShell command "Get-SVTBackup".

To run any queries that fetch backup-related data, an account with read-only access will not suffice.

Please refer to the below document (page no.34) to get the list of privileges that are required to perform backup and restore operations.

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00131388en_us 

Post adding these privileges to the role assigned to the read-only user, re-run the above PowerShell command "Get-SVTBackup".

Hope this helps.

Regards,
Sanika.

[Sunitha_Mod]

Hello @Q_M13,

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.

[Q_M13 · Accepted solution]

Hi, 

thank you for your reply it's exactly what was missing for me.

I'll explain the steps involved in authorizing a vCenter user to perform the PowerShell command "Get-SVTBackup" :

1. You need a vsphere.local group or an Active Directory group because we can only add rights on OmniStack to groups and not users

2. Map the group to the OmniStack "BackupUser" role (there are only 2 Omnistack roles admin and Backup)  in Powershell :

Connect-SVT -OVC 1X.X.X.X -Credential Get-Credentials
$token = Get-HPESvtHostOAuthToken -Credential Get-Credentials -Hostname X.X.X.X
Set-HPESvtRbacRoleAssignment -Group VSPHERE.LOCAL\group -Role BackupUser -HostOAuthToken $token

3. add rights to the group created in vCenter. There are many "VMware privileges required for backup and restore operations". But after a few tests, I found out that you need only 1 right to add to run the Get-SVTBackup command, you only need create snapshot right.

And my script works perfectly with a user who has restricted rights !!