Join us for a virtual Nutanix User Group meeting with Jarian Gibson as he covers Nutanix Cloud Clusters (NC2) on Azure and AWS with Citrix. <\/span><\/p>

Jarian will take a deep dive into NC2 on Azure architecture and Citrix on NC2 on Azure\u00a0that helps you strengthen your business continuity and disaster recovery position. He\u2019ll also provide the latest updates for NC2 on AWS.<\/span><\/p>

Plus, we're\u00a0giving away a Nutanix suitcase to one lucky winner!\u00a0Opt-in when you register\u00a0to be entered to win.\u00a0<\/p>","author":{"id":113632,"url":"\/members\/karlie-beil-113632","name":"Karlie Beil","avatar":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/icon\/200x200\/1581aab3-bcf6-49f4-b2fb-3d11e8c010dc.png","userTitle":"Community Manager","rank":{"isBold":false,"isItalic":false,"isUnderline":false,"name":"Community Manager","color":"#0873ba"},"userLevel":4},"type":"Webinar","url":"https:\/\/next.nutanix.com\/events\/global-nug-nc2-on-azure-and-aws-with-citrix-151","image":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/attachment\/f9693b5b-436b-427a-9b98-531b4040ff24_thumb.png","location":"","startsAt":1678298400,"endsAt":1678302000,"contentType":"event","attendees":[],"attendeeCount":0,"isLoggedInUserAttendee":false,"createdAt":"1675974969"},"phrases":{"Forum":{"{n} year|{n} years":"{n} year|{n} years","{n} month|{n} months":"{n} month|{n} months","{n} day|{n} days":"{n} day|{n} days","{n} hour|{n} hours":"{n} hour|{n} hours","{n} minute|{n} minutes":"{n} minute|{n} minutes","just":"just now","{plural} ago":"{plural} ago"}}}">

问题

自定义角色不起作用

m
徽章 +1

嗨伙计，

我们一直从Prism Central VM获得有关内存使用情况的警报。这似乎是一个已知的问题。因此，为了抑制内部票务系统中反复生成案例的警报，我正在努力在内存使用率达到90％时设置自动重新启动。

我已经编写了代码来执行此操作（在PowerShell中使用Nutanix CMDLET和REST API呼叫的混合）。在我自己的帐户下运行时，它可以正常工作。我的帐户具有“用户管理”角色。我还应该提到我们将角色映射到广告组。

但是，我希望将计划的作业移至服务帐户的上下文中。该服务帐户已通过单个作业“更新VM Power状态”分配了自定义角色

我将角色添加到我的服务帐户用户中，并将其应用于Prism VM（和测试VM）。

我想知道我是否需要授予更多权限

访问被拒绝
SET-NTNXVMPOWERSTATE：远程服务器返回错误：（403）禁止。
Hi Folks,<\/p>

We have been getting alerts on memory usage from the Prism Central VM. It seems to be a known issue. So\u00a0to suppress the alerts from repeatedly generating cases in our internal ticketing system I am working on setting up an automated restart when memory usage gets to 90%.<\/p>

I\u2019ve written the code to do this (a mix of the Nutanix cmdlets and Rest API calls in PowerShell). It works fine\u00a0when run under my own account. My account has the \u2018User Admin\u2019 role. I should also mention we map\u00a0roles to AD groups.<\/p>

However I wish to move the scheduled job to run under the context of a \u00a0service account. The service account has been assigned a Custom Role with a single\u00a0assignment \u2018Update VM Power State\u2019<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/ncm-intelligent-operations-formerly-prism-pro-ultimate-26/\"<\/figure>

\u00a0<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/ncm-intelligent-operations-formerly-prism-pro-ultimate-26/\"<\/figure>

\u00a0<\/p>

I\u2019m added the Role to my Service account user and applied it to the Prism VM (and a Test VM).<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/ncm-intelligent-operations-formerly-prism-pro-ultimate-26/\"<\/figure>

\u00a0<\/p>

I\u2019m wondering if I need to grant more permissions as I am getting an error<\/p>

\u00a0<\/p> 

Access is denied
Set-NTNXVMPowerState : The remote server returned an error: (403) Forbidden.<\/code><\/pre>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
该主题已关闭以供评论

5个答复

Anishwalia20
秩
UserLevel 6
徽章 +5

嘿 @micmaher001，您可以尝试添加并选择“更新VM”选项，然后检查相同或尝试选择“基本访问对于VM，然后检查。

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Hey @micmaher001<\/user-mention>\u00a0, can you try adding and selecting the \u201cUpdate VM<\/strong>\u201d option and then check the same or maybe try selecting \u201cBasic Access<\/strong>\u201d for the VM and then check.\u00a0<\/p>

\u00a0<\/p>

\u00a0<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
徽章 +1

嗨，阿尼什，

我为此开了一个支持案例。最后，问题是服务帐户是全球棱镜中心角色映射的观众，同时还具有自定义角色。

这引起冲突，我们需要删除查看器来解决此问题。

Hi Anish,<\/p>

\u00a0<\/p>

I opened a support case on this. In the end the issue was\u00a0the service account was\u00a0a viewer in global Prism Central\u00a0role mapping whilst also having\u00a0with the custom role.<\/p>

This cause a conflict and we needed to\u00a0remove\u00a0Viewer\u00a0to fix this.<\/p>

\u00a0<\/p>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Anishwalia20
秩
UserLevel 6
徽章 +5

啊，我看到了，是的，我们已经看到了由于PC Global角色映射和PC RBAC（基于角色的访问控制）的冲突而看到此类问题的场景。非常感谢您让我们知道这一点。：微笑：

这将帮助其他人有类似问题以及在PC上具有这样的角色冲突时。

您能告诉我这个问题的情况是什么？

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Ahh I see, yes we have seen scenarios where we see such issues due to conflicts on PC global role mapping and PC RBAC(role based access control). Thanks a lot for letting us know about it.\":smile:\"<\/p>

\u00a0<\/p>

This will help others with similar issues and when they have such Role conflicts on PC.<\/p>

\u00a0<\/p>

Can you tell me what was the case number for this issue ?<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
徽章 +1

：竖起大拇指：00812919

\u00a0<\/p>

\":thumbsup:\" 00812919<\/p>

\u00a0<\/p>

\u00a0<\/p>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Anishwalia20
秩
UserLevel 6
徽章 +5

嘿 @micmaher001， 多谢。：微笑：

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Hey @micmaher001<\/user-mention>\u00a0, thanks a lot.\u00a0\":smile:\"<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">
Baidu