How to grant admin access to a CDOT cluster via an Active Directory group

Question

We have a new 4 node CDOT cluster that we are building out at this time. This is the first on our company as the rest are all running 7-mode.When I add execute the following commands on our new CDOT cluster, I am able to successfully login via putty or system manager:security login create -vserver vs1 -username DOMAIN\username -application ontapi -authmethod domain -role admin
security login create -vserver vs1 -username DOMAIN\username -application ssh -authmethod domain -role adminHowever, I need to provision security access via AD groups as we have a ot of admins that need access. If I use the following commands to provision security, the commands are accepted by ONTAP but AD credential sets will not grant access to putty or system manager.security login create -vserver vs1 -username "DOMAIN\AD Group" -application ontapi -authmethod domain -role admin
security login create -vserver vs1 -username "DOMAIN\AD Group" -application ssh -authmethod domain -role adminPlease provide comments if you have ideas on next steps.

Answer 1

I have done it in 8.3 please see below for the steps Here are the steps to grant access after you have CIFS setup in your SVM (This portion has to be done before the below steps will allow access) my-fas8060> security login domain-tunnel create -vserver (nameofSVM) (gives SSH  login)my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application ssh -authmethod domain -role admin (gives GUI login)my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application http -authmethod domain -role admin my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application ontapi -authmethod domain -role admin