assign group L:NAM.NSROOT.NET\SAN_Support to role Admin; assign group L:NAM.NSROOT.NET\dl_CTI_NAM_Tech_Refresh to role StorageAdmin; assign group L:NAM.NSROOT.NET\SAN_View to role Monitor; assign group "L:NAM.NSROOT.NET\SDC_dpt_Distributed Storage Engineering" to role Monitor; assign group L:NAM.NSROOT.NET\dl_CTI_US_Distributed_Storage_Capacity_Management to role Monitor; assign group D:NAM\SAN_Support to role Admin; assign group D:NAM\dl_CTI_NAM_Tech_Refresh to role StorageAdmin; assign group D:NAM\SAN_View to role Monitor; assign group "D:NAM\SDC_dpt_Distributed Storage Engineering" to role Monitor; assign group D:NAM\dl_CTI_US_Distributed_Storage_Capacity_Management to role Monitor; assign group H:*\san to role Admin; assign user storevntd to role Auditor; assign user drascan to role Auditor; assign user hpna to role Monitor; assign user srmadmin to role Monitor; assign user H:namecws01\root to role Monitor; assign user H:namecws02\root to role Monitor; assign user H:namrcws01\root to role Monitor; assign user H:namrcws02\root to role Monitor; assign user H:nam390eccsag01p\root to role StorageAdmin; assign user H:nam390eccsag02p\root to role StorageAdmin; assign user H:nam390eccsag03p\root to role StorageAdmin; assign user H:nam390eccsag04p\root to role StorageAdmin; assign user H:nam390eccsag05p\root to role StorageAdmin; assign user H:namepssrau01\SYSTEM to role Monitor; assign user H:namepsss01\SYSTEM to role Monitor; assign user H:namrpssrau01\SYSTEM to role Monitor; assign user H:namrpsss01\SYSTEM to role Monitor; assign user H:namupssrau01\SYSTEM to role Monitor; assign user H:namupsss01\SYSTEM to role Monitor; assign user "H:nameemc01\SPA Audit Log" to role PerfMonitor; assign user "H:nameemc02\SPA Audit Log" to role PerfMonitor; assign user "H:nameemc03\SPA Audit Log" to role PerfMonitor; assign user H:nameemc01\SPA to role PerfMonitor; assign user H:nameemc02\SPA to role PerfMonitor; assign user H:nameemc03\SPA to role PerfMonitor; assign user H:nameemc01\smc to role Auditor; assign user H:nameemc02\smc to role Auditor; assign user H:nameemc03\smc to role Auditor; ======================= Step1) create a command file and the below entries vi adduser.cmd assign group L:APAC.NSROOT.NET\SGAPCAPPSPRDSANSecure to role StorageAdmin; assign group L:APAC.NSROOT.NET\apacsan to role StorageAdmin; assign group L:APAC.NSROOT.NET\storageonly to role StorageAdmin; assign group D:APAC\SGAPCAPPSPRDSANSecure to role Admin; assign group D:APAC\apacsan to role Admin; assign group D:APAC\storageonly to role Admin; assign group L:APAC.NSROOT.NET\aspac_srm_SAN_VIEW to role Monitor; assign group D:APAC\aspac_srm_SAN_VIEW to role Monitor; assign user H:hlixiu170\root to role Monitor; assign user H:hlixiu633\root to role Monitor; assign user H:hlixiu634\root to role Monitor; assign user H:hsunsmm02\root to role Monitor; assign user H:slixip167\root to role Monitor; assign user H:ssunsmm01\root to role Monitor; assign user H:ssunsmm02\root to role Monitor; assign user H:sgctilxsana01p\root to role Monitor; assign user H:sgctctilxsan1p\root to role Monitor; assign user H:sgctctilxsan2p\root to role Monitor; assign user H:hkastctilxsan2c\root to role Monitor; assign user H:hkastctilxsan1c\root to role Monitor; assign user H:hkiadctilxsan1c\root to role Monitor; assign user storevntd to role Auditor; assign user drascan to role Auditor; assign user hpnaro to role Monitor; assign user storbg to role Monitor; assign user "H:APACSGU4V03\SPA Audit Log" to role PerfMonitor; assign user "H:APACSGU4V04\SPA Audit Log" to role PerfMonitor; assign user "H:APACHKIADU4V03\SPA Audit Log" to role PerfMonitor; assign user "H:APACHKIADU4V04\SPA Audit Log" to role PerfMonitor; assign user "H:APACHKASTU4V03\SPA Audit Log" to role PerfMonitor; assign user "H:APACHKASTU4V04\SPA Audit Log" to role PerfMonitor; assign user "H:apacsgwinpv7865\SPA Audit Log" to role PerfMonitor; assign user H:APACSGU4V03\SPA to role PerfMonitor; assign user H:APACSGU4V04\SPA to role PerfMonitor; assign user H:APACHKIADU4V03\SPA to role PerfMonitor; assign user H:APACHKIADU4V04\SPA to role PerfMonitor; assign user H:APACHKASTU4V03\SPA to role PerfMonitor; assign user H:APACHKASTU4V04\SPA to role PerfMonitor; assign user H:apacsgwinpv7865\SPA to role PerfMonitor; assign user H:APACSGU4V03\smc to role Admin; assign user H:APACSGU4V04\smc to role Admin; assign user H:APACHKIADU4V03\smc to role Admin; assign user H:APACHKIADU4V04\smc to role Admin; assign user H:APACHKASTU4V03\smc to role Admin; assign user H:APACHKASTU4V04\smc to role Admin; assign user H:apacsgwinpv7865\smc to role Admin; assign group H:*\storageonly to role Admin; assign user H:slixip168\root to role Monitor; assign user H:clixip170\root to role Monitor; assign user H:clixip155\root to role Monitor; assign user H:apacasrmcol1\srmadmin to role Monitor; assign user H:apacasrmcol2\srmadmin to role Monitor; assign user H:apacasrmcol3\srmadmin to role Monitor; assign user H:apacasrmcol4\srmadmin to role Monitor; assign user H:apacnsrmcol1\srmadmin to role Monitor; assign user H:apacnsrmcol2\srmadmin to role Monitor; assign user H:apacnsrmcol3\srmadmin to role Monitor; assign user ar91297 to role Admin; APACASRMCOL1.Apac.nsroot.net * APACASRMCOL2.Apac.nsroot.net * APACASRMCOL3.Apac.nsroot.net * APACASRMCOL4.Apac.nsroot.net * apacnsrmcol1.Apac.nsroot.net * apacnsrmcol2.Apac.nsroot.net * apacnsrmcol3.Apac.nsroot.net * hlixu133 SymmID Attachment Model Version Size (MB) Devices Devices 000292603629 Local VMAX-1 5876 360960 4 16506 000295700517 Local VMAX40K 5876 258048 4 22195 000295700897 Local VMAX40K 5876 172032 4 10178 000295701026 Local VMAX40K 5876 172032 4 7809 000296800434 Local VMAX100K 5977 978944 24 1783 000497200055 Local VMAX400K 5977 948224 24 3309 000498700157 Local VMAX10K 5876 172032 1 13750 000498700629 Local VMAX10K 5876 86016 4 8547 symcfg list | grep Local|awk '{print $1}' >/tmp/sno.txt for i in `cat /tmp/sno.txt`;do symauth -sid $i list|egrep "Symmetrix|Authorization|Enforcement";done symcfg list | grep Local|awk '{print $1}' | while read a do symauth -sid $a list|egrep "Symmetrix|Authorization|Enforcement";done 7 for i in `cat /tmp/sno.txt`;do symauth -sid $i list;done 8 for i in `cat /tmp/sno.txt`;do symauth -sid $i -f /tmp/ar91297.cmd preview;done 9 for i in `cat /tmp/sno.txt`;do symauth -sid $i -f /tmp/ar91297.cmd commit;done 10 cat /tmp/sno.txt assign user H:sgctilxsana01p\root to role Admin; assign user H:sgctctilxsan1p\root to role Admin; assign user H:sgctctilxsan2p\root to role Admin; assign user H:hkastctilxsan1c\root to role Admin; assign user H:hkiadctilxsan1c\root to role Admin; assign user H:hkastctilxsan2c\root to role Monitor; reassign user H:hkastctilxsan2c\root to role Admin; Step2) symauth -sid 434 preview -f adduser.cmd Step3) symauth -sid 434 commit -f adduser.cmd Step4) Set the mode to advise which will allow everything but will produce the warnings in symapi log symauth -sid 434 set enforcement advise -nop everything fine then enabled it Step5) symauth -sid 434 enable If any issues disable symauth -sid 434 disable symauth -sid 434 -cmd "assign user H:apachkastu4v04.apac.nsroot.net\smc to role Admin;" preview symauth -sid 0269 -cmd "assign user ar91297 to role Admin;" preview assign group L:APAC.NSROOT.NET\SGAPCAPPSPRDSANSecure to role Admin; assign group L:APAC.NSROOT.NET\apacsan to role Admin; assign group L:APAC.NSROOT.NET\storageonly to role Admin; assign group D:APAC\SGAPCAPPSPRDSANSecure to role Admin; assign group D:APAC\apacsan to role Admin; assign group D:APAC\storageonly to role Admin; assign group L:APAC.NSROOT.NET\aspac_srm_SAN_VIEW to role Monitor; assign group D:APAC\aspac_srm_SAN_VIEW to role Monitor;