STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must enforce administrator privileges based on their defined roles.

DISA Rule

SV-246927r1137874_rule

Vulnerability Number

V-246927

Group Title

SRG-APP-000033-NDM-000212

Rule Version

NAOT-AC-000006

Severity

CAT I

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
• CCI-001199 - Protects the confidentiality and/or integrity of organization-defined information at rest.
• CCI-002139 - Create organization-defined system accounts dynamically.

Weight

10

Fix Recommendation

Configure roles with "security login role create -role <name>" to create new roles, and "security login create -user-or-group-name <user_name> -role <name>" to assign the role to a specific user or group.

Check Contents

Use "security login show" to see all configured users and their roles. Use "security login role show" to see specific commands allowed for each role.

If ONTAP does not enforce administrator privileges based on their defined roles, this is a finding.

Vulnerability Number

V-246927

Documentable

False

Rule Version

NAOT-AC-000006

Severity Override Guidance

Use "security login show" to see all configured users and their roles. Use "security login role show" to see specific commands allowed for each role.

If ONTAP does not enforce administrator privileges based on their defined roles, this is a finding.

Check Content Reference

M

Target Key

5415