STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must enforce access restrictions associated with changes to the device configuration.

DISA Rule

SV-246939r961461_rule

Vulnerability Number

V-246939

Group Title

SRG-APP-000380-NDM-000304

Rule Version

NAOT-CM-000001

Severity

CAT II

CCI(s)

• CCI-001813 - Enforce access restrictions using organization-defined mechanisms.

Weight

10

Fix Recommendation

Configure users with administrative privilege that allows device configuration with "security login create -user-or-group-name <user_name> -role admin".

Check Contents

Use "security login show -role admin" to see users with administrative privilege that allow device configuration.

If ONTAP does not enforce access restrictions associated with changes to the device configuration, this is a finding.

Vulnerability Number

V-246939

Documentable

False

Rule Version

NAOT-CM-000001

Severity Override Guidance

Use "security login show -role admin" to see users with administrative privilege that allow device configuration.

If ONTAP does not enforce access restrictions associated with changes to the device configuration, this is a finding.

Check Content Reference

M

Target Key

5415