STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role.

DISA Rule

SV-246947r1015269_rule

Vulnerability Number

V-246947

Group Title

SRG-APP-000153-NDM-000249

Rule Version

NAOT-IA-000001

Severity

CAT II

CCI(s)

• CCI-004045 - Require users to be individually authenticated before granting access to the shared accounts or resources.

Weight

10

Fix Recommendation

Configure new administrator active directory users or groups with "security login create -user-or-group-name <user_name> -role admin -authentication-method domain".

Check Contents

Use "security login show -role admin -authentication-method domain" to see all configured admin users and groups that authenticate using active directory.

If ONTAP is not configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role, this is a finding.

Vulnerability Number

V-246947

Documentable

False

Rule Version

NAOT-IA-000001

Severity Override Guidance

Use "security login show -role admin -authentication-method domain" to see all configured admin users and groups that authenticate using active directory.

If ONTAP is not configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role, this is a finding.

Check Content Reference

M

Target Key

5415