proud phoenix
Hey all,
So I'm trying to utilize the below
netapp.ontap.na_ontap_user_role:
state: present
privileges:
- path: "{{ sec_roles['football']['rw'] }}"
access: read_create_modify
vserver: "{{ short_hostname }}"
name: football
hostname: "{{ g_hostname }}"
username: "{{ g_username }}"
password: "{{ g_password }}"
use_rest: always
validate_certs: false
To make sure that our systems don't undergo creep and set everything in a variable file, then immediately use that to create/modify/maintain roles across five separate clusters.
The role does exist already, but the error below cites using the rest-role ... Rest-role what? Module? There isn't one in the list from what I can tell.
"msg": "Error creating role privilege ['/api', '/api/name-services/name-mappings', '/api/protocols/cifs/shares', '/api/protocols/nfs/export-policies', '/api/storage/volumes']: calling: security/roles/f21679d0-089c-11ef-b95d-00a098fe4a9c/football/privileges: got {'message': 'This role is mapped to a rest-role and cannot be modified directly. Modifications should be done with rest-role.', 'code': '5636168'}."
}
sharp aurora