This message was deleted.
# _general
s
This message was deleted.
l
You mean the Nutanix account that MCS uses to connect?
j
Thats the one 😊 for the hosting connection into AHV
l
@Kees Baggerman can you help Jake out on this?
I am not sure what they need to be mate. I've rebuilt my lab without AHV recently or I'd dig it.
j
No worries dude - cheers for your help! I’m just trying to avoid using admin rights etc
By default there isn't a role to do what you require. This may do the job though.
k
That’s for PC, our plugin works with PE right now
l
Kees is the man Jake.
j
Cheers guys. So just a custom role with the usual permissions is all that’s needed? (VM operations, Image operations, and Virtual Disks?)
l
I believe so mate. Do you have the tools to be able to test it?
k
You’ll need admin rights for now, service account would work tho. Within reasonable time we’ll release the plugin for PC where you can have the segmentation of permissions
j
Cool cheers! I have been using admin but just wanted to see if there was a better way 😁 thanks guys!
l
And there you have it mate ;-) the doc I sent was for Prism Enterprise and not Prism Central. My bad. Thanks Kees, always a gentleman.
k
The other way around @Leee Jeffries, the doc is for Prism Central (overlay across different Prism Element instances) and Prism Elements is the management layer of a single cluster
l
Cheers Kees. I need an opportunity to deploy some Nutanix goodness. I've setup CE and loved it.
k
👍 I might have dabbled around with AHV myself, I think it’s decent 😉
l
Ha ha, you going to E2E?
k
I might, apparently there’s an ask for some ahv education ;-)
👍 2
j
Should we talk about local account vs domain account with this?
c
In June I had to switch to a cluster local account created in Prism Element on our clusters for each host connection. It was not performing well when using an AD Service account, it seems to enumerate and validate LDAP for every action received from Citrix. Caused some really inconsistent behavior with MCS actions at times like scheduled reboots sporadically not occurring.
k
Yeah you can disable that LDAP query, I think @Jarian Gibson changed this in our Best Practice guide (both Jarian and myself are Nutanix employees Chris)
c
Yep, you presented with my boss and met with one of my peers at .NEXT.
👍 2