Join us for a virtual Nutanix User Group meeting with Jarian Gibson as he covers Nutanix Cloud Clusters (NC2) on Azure and AWS with Citrix. <\/span><\/p>

Jarian will take a deep dive into NC2 on Azure architecture and Citrix on NC2 on Azure\u00a0that helps you strengthen your business continuity and disaster recovery position. He\u2019ll also provide the latest updates for NC2 on AWS.<\/span><\/p>

Plus, we're\u00a0giving away a Nutanix suitcase to one lucky winner!\u00a0Opt-in when you register\u00a0to be entered to win.\u00a0<\/p>","author":{"id":113632,"url":"\/members\/karlie-beil-113632","name":"Karlie Beil","avatar":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/icon\/200x200\/1581aab3-bcf6-49f4-b2fb-3d11e8c010dc.png","userTitle":"Community Manager","rank":{"isBold":false,"isItalic":false,"isUnderline":false,"name":"Community Manager","color":"#0873ba"},"userLevel":4},"type":"Webinar","url":"https:\/\/next.nutanix.com\/events\/global-nug-nc2-on-azure-and-aws-with-citrix-151","image":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/attachment\/f9693b5b-436b-427a-9b98-531b4040ff24_thumb.png","location":"","startsAt":1678298400,"endsAt":1678302000,"contentType":"event","attendees":[],"attendeeCount":0,"isLoggedInUserAttendee":false,"createdAt":"1675974969"},"phrases":{"Forum":{"{n} year|{n} years":"{n} year|{n} years","{n} month|{n} months":"{n} month|{n} months","{n} day|{n} days":"{n} day|{n} days","{n} hour|{n} hours":"{n} hour|{n} hours","{n} minute|{n} minutes":"{n} minute|{n} minutes","just":"just now","{plural} ago":"{plural} ago"}}}">

问题

自定义角色不起作用

  • 2020年6月18日
  • 5个答复
  • 2426次观点
m
徽章 +1

嗨伙计，

我们一直从Prism Central VM获得有关内存使用情况的警报。这似乎是一个已知的问题。因此，为了抑制在我们的内部票务系统中反复生成案例的警报，我正在努力在内存使用率达到90％时设置自动重新启动。

我已经编写了代码来执行此操作（在PowerShell中使用了Nutanix CMDLET和REST API调用）。当我自己的帐户运行时，它可以正常工作。我的帐户具有“用户管理”角色。我还应该提到我们将角色映射到广告组。

但是，我希望将预定的作业移至服务帐户的上下文下运行。该服务帐户已分配了一个自定义角色，该角色具有单个作业“ Update VM Power状态”

我将角色添加到我的服务帐户用户中，并将其应用于Prism VM（和测试VM）。

我想知道我是否需要授予更多权限，因为我会遇到错误

访问被拒绝
SET-NTNXVMPOWERSTATE：远程服务器返回错误：（403）禁止。
Hi Folks,<\/p>

We have been getting alerts on memory usage from the Prism Central VM. It seems to be a known issue. So\u00a0to suppress the alerts from repeatedly generating cases in our internal ticketing system I am working on setting up an automated restart when memory usage gets to 90%.<\/p>

I\u2019ve written the code to do this (a mix of the Nutanix cmdlets and Rest API calls in PowerShell). It works fine\u00a0when run under my own account. My account has the \u2018User Admin\u2019 role. I should also mention we map\u00a0roles to AD groups.<\/p>

However I wish to move the scheduled job to run under the context of a \u00a0service account. The service account has been assigned a Custom Role with a single\u00a0assignment \u2018Update VM Power State\u2019<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"<\/figure>

\u00a0<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"<\/figure>

\u00a0<\/p>

I\u2019m added the Role to my Service account user and applied it to the Prism VM (and a Test VM).<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"<\/figure>

\u00a0<\/p>

I\u2019m wondering if I need to grant more permissions as I am getting an error<\/p>

\u00a0<\/p> 

Access is denied
Set-NTNXVMPowerState : The remote server returned an error: (403) Forbidden.<\/code><\/pre>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
该主题已关闭以供评论

5个答复

Anishwalia20
秩
UserLevel 6
徽章 +5

嘿 @micmaher001，您可以尝试添加并选择“更新VM”选项，然后检查相同或尝试选择“基本访问对于VM，然后检查。

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Hey @micmaher001<\/user-mention>\u00a0, can you try adding and selecting the \u201cUpdate VM<\/strong>\u201d option and then check the same or maybe try selecting \u201cBasic Access<\/strong>\u201d for the VM and then check.\u00a0<\/p>

\u00a0<\/p>

\u00a0<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
徽章 +1

嗨，阿尼什，

我为此开了一个支持案例。最后，问题是该服务帐户是全球Prism中心角色映射的观众，同时还具有自定义角色。

这引起冲突，我们需要删除查看器来解决此问题。

Hi Anish,<\/p>

\u00a0<\/p>

I opened a support case on this. In the end the issue was\u00a0the service account was\u00a0a viewer in global Prism Central\u00a0role mapping whilst also having\u00a0with the custom role.<\/p>

This cause a conflict and we needed to\u00a0remove\u00a0Viewer\u00a0to fix this.<\/p>

\u00a0<\/p>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Anishwalia20
秩
UserLevel 6
徽章 +5

啊，我看到了，是的，我们已经看到了情况，由于PC全球角色映射和PC RBAC（基于角色的访问控制）的冲突，我们看到了此类问题。非常感谢您让我们知道这一点。：微笑：

这将帮助其他人有类似问题以及在PC上具有这种角色冲突时。

您能告诉我这个问题的情况是什么？

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Ahh I see, yes we have seen scenarios where we see such issues due to conflicts on PC global role mapping and PC RBAC(role based access control). Thanks a lot for letting us know about it.\":smile:\"<\/p>

\u00a0<\/p>

This will help others with similar issues and when they have such Role conflicts on PC.<\/p>

\u00a0<\/p>

Can you tell me what was the case number for this issue ?<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

m
徽章 +1

：竖起大拇指：00812919

\u00a0<\/p>

\":thumbsup:\" 00812919<\/p>

\u00a0<\/p>

\u00a0<\/p>","quoteUsername":"micmaher001","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Anishwalia20
秩
UserLevel 6
徽章 +5

嘿 @micmaher001， 多谢。：微笑：

阿尼什·辛格·瓦利亚（Anish Singh Walia）
Hey @micmaher001<\/user-mention>\u00a0, thanks a lot.\u00a0\":smile:\"<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">
Baidu