Preparation for Scanning HPE Alletra 6000 / Nimble storage systems
StorageGuard collects configuration and security posture data from HPE Alletra 6000 and Nimble systems using read-only API calls and (optionally) CLI commands executed directly on the storage system.
The following table lists the scan requirements:
| # | Description |
|---|---|
| 1 | Provide the network name or IP address of the HPE storage system. |
| 2 | Provide a read-only user account (existing or dedicated for StorageGuard) with API access and optional CLI access. Example API endpoints: GET /v1/arrays GET /v1/groups GET /v1/space_domains GET /v1/user_groups |
| 3 | Optional (recommended): Enable CLI access over SSH. Example CLI commands: group --info partner --list userpolicy --info |
| 4 | Verify connectivity from the StorageGuard collector to each system: • HTTPS (default port 5392) • SSH (port 22, optional) |
Creating a User Account for Scanning HPE Alletra 6000 / Nimble storage systems
StorageGuard requires a user account with read-only access. The Operator role is recommended.
Operator role capabilities:
- Read-only access to system, configuration, and security settings
- Permission to execute required REST API (GET) calls
- Ability to run non-privileged CLI commands (if SSH is enabled)
NOTE: User administration APIs are available only to admin users, which means some checks can only be executed with Admin privileges.
Creating an Operator User via CLI
Use the following command to create a local user with the Operator role:
useradmin --add sguard --role operator --full_name "<Full Name>"
Parameters:
- --add – Specifies the unique username for the new account
- --role operator – Assigns the Operator (read only) role
- --full_name – Optional display name for the user
Creating an Operator User via Web GUI
The following procedure can be used to create the recommended user:
- Log in to the HPE Nimble / Alletra Management UI as an Administrator.
- Navigate to: Administration → Security → Users and Groups.
- Click Add.
- Enter the Username and Full Name.
- From the Role dropdown, select Operator.
- Set and confirm a password.
- Click Save.
Comments
0 comments
Please sign in to leave a comment.