Looking at the new REST Ansible modules, First I see no obivous difference between then, second I see no option to assocaite them with a Security Descriptor
na_ontap_file_security_permissions module
na_ontap_file_security_permissions_acl module
Main goal is to assign SACL to directories. I would use the cli but I am having difficulty figuring out what endpoint I would use if the above modules do not work.
#Odd question I see the Security Descriptors got a new module in ansible netapp.ontap.na_ontap_fdsd.
stuck pebble
digital mango
They map to 2 different REST API
na_ontap_file_security_permissions maps to
/protocols/file-security/permissions/{svm.uuid}/{path}
This will let you create and delete SD specific information but you can not updated or add new ACL's with this module after they are created.
Command wise this would be
vserver security file-directory ntfs modify
https://library.netapp.com/ecmdocs/ECMLP2885799/html/#/NAS/file_directory_security_modify
And maps to na_ontap_file_security_permissions_acl
/protocols/file-security/permissions/{svm.uuid}/{path}/acl
This module let you specifically add/updates/delete specific ACL's from a SD with out recreating the SD.
Command wise this would be
vserver security file-directory ntfs dacl modify
vserver security file-directory ntfs sacl modify
https://library.netapp.com/ecmdocs/ECMLP2885799/html/#/NAS/file_directory_security_acl_modify