InsightIQ Error: The InsightIQ user on the cluster does not have permission to view quota reports.


Error: The InsightIQ user on the cluster does not have permission to view quota reports.

Fix
  1. Verify from InsightIQ server configuration to confirm the user being used for cluster connection.  Go to InsightIQ server WebUI page, and click on Settings -> Configure (click on the link associated with the cluster in question).  Check what username is being used for monitoring.  By default we use user - insightiq, If it is Different user follow the below Steps for that particular User ID instead of UserID: InsightIQ (If it a domain user, use the user id as <User_ID@Domain>).

  1. Login to cli of the cluster node in question as root user.

  1. Verify the current set of privileges associated with insightiq user:
//isi auth mapping token <User_ID@Domain>
# isi auth mapping token insightiq
                   User
                       Name : insightiq
                        UID : 15
                        SID : S-1-22-1-15
                    On Disk : 15
                    ZID: 1
                   Zone: System
             Privileges: ISI_PRIV_LOGIN_PAPI
                         ISI_PRIV_EVENT
                         ISI_PRIV_JOB_ENGINE
                         ISI_PRIV_STATISTICS

  1. Check if any role is assigned to user account InsightIQ, If it is there; like I Bolded below; skip step 5 and go to Step 6. If no role assigned then go to Step 5
IsilonCluster# isi auth roles list --v | grep -B4 -i insightiq
      Read Only: True
--------------------------------------------------------------------------------
       Name: InsightIQRole
Description: -
    Members: insightiq

  1. Create a new Role and add user to that Role
IsilonCluster# isi auth roles create InsightIQRole --description "Allows access to read and write SmartQuotas data and settings, as well as read filesystem namespace, snapshot, and smartpools information."
IsilonCluster# isi auth roles modify InsightIQRole --add-user insightiq

  1. Run the following set of commands to give insightiq user additional privileges:

IsilonCluster# isi auth roles modify InsightIQRole --add-priv ISI_PRIV_QUOTA
IsilonCluster# isi auth roles modify InsightIQRole --add-priv ISI_PRIV_NS_IFS_ACCESS
IsilonCluster# isi auth roles modify InsightIQRole --add-priv ISI_PRIV_NS_TRAVERSE
IsilonCluster# isi auth roles modify InsightIQRole --add-priv ISI_PRIV_SNAPSHOT
IsilonCluster# isi auth roles modify InsightIQRole --add-priv ISI_PRIV_SMARTPOOLS

  1. Verify again the privileges associated with insightiq user to make sure you see the following:

IsilonCluster# isi auth mapping token insightiq
                   User
                       Name : insightiq
                        UID : 15
                        SID : S-1-22-1-15
                    On Disk : 15
                    ZID: 1
                   Zone: System
             Privileges: ISI_PRIV_LOGIN_PAPI
                         ISI_PRIV_EVENT
                         ISI_PRIV_JOB_ENGINE
                         ISI_PRIV_QUOTA
                         ISI_PRIV_SMARTPOOLS
                         ISI_PRIV_SNAPSHOT
                         ISI_PRIV_STATISTICS
                         ISI_PRIV_NS_TRAVERSE
                         ISI_PRIV_NS_IFS_ACCESS
Logon to the InsightIQ server CLI (through Putty), and restart IIQ service with the following command:
InsightIQ# sudo /sbin/service insightiq stop
Stopping insightiq:                                        [  OK  ]
InsightIQ# sudo /sbin/service insightiq start
Starting insightiq:                                        [  OK  ]

  1. Verify if the Quota Reporting page can be displayed correctly from the InsightIQ WebUI page.

Ref:

3 comments:

  1. KyleMay 30, 2020 at 8:54 AM

    fancy giving me some 1-2-1 help on a simple iSCSI setup. (nothing to do with this post!)

    ReplyDelete
  2. AnonymousAugust 6, 2020 at 3:31 AM

    Thanks for sharing your valuable information!!!! I like this, I want to tell that read this article and get amazing information of loop.
    Germany VPS Server Hosting

    ReplyDelete
  3. AnonymousSeptember 17, 2025 at 7:46 AM

    This is a really well-written and informative post. I like the way the content is explained in simple and clear language, which makes it easy to understand. The examples and points shared are very useful and practical. digital marketing course in ameerpet hyderabad, Best Digital Marketing Institute in Hyderabad. Web Trainings Academy is trusted digital marketing training institute in Hyderabad, India.
    We offer specialized skill-based practical programs in digital marketing course in Hyderabad, SEO training, Google Ads, Social media marketing, and web designing course. Our digital marketing courses are designed for students, working professionals and entrepreneurs to learn and implement the concepts in real-world scenarios.! for more info plz visit us at Digital Marketing Institute in hyderabad
    I appreciate the effort put into creating this article, as it provides real value to readers. It is always good to find content that not only shares knowledge but also encourages new ideas and perspectives. I will definitely keep visiting for more posts like this. Great job and keep up the good work!

    ReplyDelete

Subscribe to: Post Comments (Atom)