解决了

如何将超级管理员角色分配给用户？

m
UserLevel 2
徽章 +2

你好。

我正在尝试将用户分配到Prism Central的内置角色，例如Super Admin，但我不允许使用。

这是与 @skeeter报道了5个月前这个线程。

这是否仍被认为是一个需要我打开支持案例的错误？

图标

最好的答案斯基特2021年4月23日，16：03

Hello Martin,<\/p>

\u00a0<\/p>

I was able to get mostly there with the API. There are a few permissions you cannot give out; however, I was told it was on the development track to get it fixed. So for now what you need to do is use the API to list all the permissions that are associated with the \u201cSuper Admin\u201d and then use these details to assign them to a new group. I used the API explorer to get code examples and to build the group. Remember the API explorer is live, so even though it says \u201ctry it\u201d it will really run the code against your\u00a0environment. I hope this helps you.<\/p>

\u00a0<\/p>

Thanks,<\/p>

Scott<\/p>

\u00a0<\/p>","className":"post__content__best_answer"}">

查看原件
Hi.<\/p>

I\u2019m trying to assign users to the built-in roles in Prism Central, for example Super Admin, but I\u2019m not allowed to.<\/p>

This is the exact same issue as @skeeter<\/user-mention>\u00a0reported on 5 months ago in this thread<\/a>.<\/p>

Is this still considered a bug that requires me to open a support case?<\/p>","quoteUsername":"Martin Edelius","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

该主题已关闭以供评论

6个答复

s
徽章 +1

你好马丁，

我大多能与API到达那里。您无法放弃一些权限；但是，有人告诉我它正在开发轨道上，以将其修复。因此，目前您需要做的就是使用API​​列出与“超级管理员”相关的所有权限，然后使用这些详细信息将其分配给新组。我使用API​​资源管理器获取代码示例并构建组。请记住，API Explorer是直播的，因此，即使它说“尝试”它也会在您的环境中运行代码。我希望这可以帮助你。

谢谢，

斯科特

Hello Martin,<\/p>

\u00a0<\/p>

I was able to get mostly there with the API. There are a few permissions you cannot give out; however, I was told it was on the development track to get it fixed. So for now what you need to do is use the API to list all the permissions that are associated with the \u201cSuper Admin\u201d and then use these details to assign them to a new group. I used the API explorer to get code examples and to build the group. Remember the API explorer is live, so even though it says \u201ctry it\u201d it will really run the code against your\u00a0environment. I hope this helps you.<\/p>

\u00a0<\/p>

Thanks,<\/p>

Scott<\/p>

\u00a0<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
UserLevel 2
徽章 +2

嗨，斯科特。

感谢您的答复，感谢。我将与API Explorer一起使用 - 在POC期间，我一直在用Nutanix API进行一些修补，所以我有一点运气，我可以到达那里。

@Alona- 您可以提供此错误状态的更新吗？如果我必须“砍”它才能按预期工作，那么棱镜中央/平静的rbac就会失去其有用性。

谢谢。

Hi Scott.<\/p>

Thanks for the reply, appreciated. I\u2019ll give it a go with the API explorer - I have been tinkering quite a bit with the Nutanix API\u2019s during our POC so with a bit of luck I\u2019ll get there.<\/p>

@Alona<\/user-mention>\u00a0- can you give an update on the status of this bug? The RBAC of Prism Central\/Calm loses a bit of its usefulness if I have to \u201chack\u201d it to get it to work as intended.<\/p>

Thanks.<\/p>","quoteUsername":"Martin Edelius","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
UserLevel 2
徽章 +2

你好 @skeeter呢

我从API创建了一个新角色，据我所知，与超级管理员角色相同的所有权利。

与具有新角色的用户登录时，我注意到我仍然无法访问Prism Central的设置。这是您在以前的答复中提到的少数几个许可之一，根本无法将其分配给新角色？

- 马丁

Hi @skeeter<\/user-mention>!<\/p>

I got a new role created via API with as far as I can tell all the same rights as the Super Admin role.\u00a0<\/p>

When logging in with a user that has the new role I notice that I still can\u2019t access settings in Prism Central. Is this one of the few permission you mention in your previous reply that can\u2019t be assigned at all to a new role?<\/p>

\u00a0<\/p>

-- Martin<\/p>","quoteUsername":"Martin Edelius","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

s
徽章 +1

你好 @martin Edelius是的，这是肯定的。据我所知，这不是一个错误，而是Nutanix没有带入GUI的东西，并且至于权限可能不是他们要带来的东西，因为他们想限制具有该权限水平的帐户数量。我是Alsotold，它可能会在下一个版本中更改，因此您可能会在那里看到它。

谢谢，

斯科特

Hello @Martin Edelius<\/user-mention>\u00a0 yes this is one for sure. From what I was told it is not a bug but something that Nutanix has not brought into the GUI and as for the permissions probably not something they are going to bring in as they\u00a0want to limit the\u00a0number of accounts with that level of permissions. I was alsotold it might be changed in the next release so you might see it there.<\/p>

\u00a0<\/p>

Thanks,<\/p>

Scott<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
UserLevel 2
徽章 +2

嗨，斯科特。

好的，我想这就是它。

I can understand that they don’t want a multitude of people having extra, mega, super, duper admin access - but in the end that should be my mistake to make, and if nothing else I think it should be possible to use groups for this access. I really dislike having to assign rights to specific users and especially local users.

谢谢您的帮助！

- 马丁

Hi Scott.<\/p>

Ok, I guess it is what it is.<\/p>

I can understand that they don\u2019t want a multitude of people having extra, mega, super, duper admin access - but in the end that should be my mistake to make, and if nothing else I think it should be possible to use groups for this access. I really dislike having to assign rights to specific users and especially local users.<\/p>

Thanks for the help!<\/p>

\u00a0<\/p>

-- Martin<\/p>","quoteUsername":"Martin Edelius","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

s
徽章 +1

我肯定同意100％。我已经使用广告组通过Prism Central提供访问权限，但仅限于您发现的许可集。我认为，Nutanix为使我们所谓的“最后一英里”的客户有很多工作要做。他们开始将PowerShell模块作为扣子提供。这将被修改和重写，但随后死了。因此，现在您有一半的Powershell模块以很快将不再弃用的形式和API编写。所有这些都说这对我来说是一个不错的产品。我是新来的，所以请以此为目标。

很高兴我能帮助一点。

谢谢，

斯科特

I agree 100% for sure. I have used AD groups to provide access through Prism Central, but it is limited to the permission sets you have found. In my opinion Nutanix has a lot of work to do to get us clients down what I call the \u201clast mile\u201d. They started providing powershell modules as a snap-in. This was going to be re revised and rewritten, but then it just died. So now you have half a powershell module written in a form that will be deprecated soon and the API. With all of that said it has been a good product so far for me. I\u2019m new to it, so take that for what it is.<\/p>

glad I could help a little.<\/p>

\u00a0<\/p>

Thanks,<\/p>

Scott<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

条款和条件
Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">
Baidu