USM: When performing actions on VNX reports "Insufficient permission to run CLI command"
Summary: Unisphere Service Manager (USM) fails with Insufficient permission to run CLI command when performing actions on VNX system. Error message: Insufficient permission to run CLI command... ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
CS is not properly updated with that user folder entries under home directory
When we login using certain user in USM to perform upgrade, Unisphere Service Manager (USM) fails with Insufficient permission to run CLI command when performing actions on VNX system.
Error message: Insufficient permission to run CLI command...
Error message: The user doesn t have CLI permission on Control Station
Pre-upgrade Health Check (PUHC) wizard fails with Insufficient permission message
Prepare for Installation wizard fails with Insufficient permission message
Perform Software Update wizard fails with Insufficient permission message
Install Software wizard fails with fails with Insufficient permission message
When we login using certain user in USM to perform upgrade, Unisphere Service Manager (USM) fails with Insufficient permission to run CLI command when performing actions on VNX system.
Error message: Insufficient permission to run CLI command...
Error message: The user doesn t have CLI permission on Control Station
Pre-upgrade Health Check (PUHC) wizard fails with Insufficient permission message
Prepare for Installation wizard fails with Insufficient permission message
Perform Software Update wizard fails with Insufficient permission message
Install Software wizard fails with fails with Insufficient permission message
Cause
User which is used to login to USM has entry in /nas/site/user_db but its folder is missing under home directory or folder present with files missing or permission set is different.
Resolution
Login to CLI as nasadmin and switch to root and check whether that user directory is present
For example: if user name is sysadmin, check whether directory sysadmin is present under home directory
If it is not present, create that directory using command: mkdir /home/sysadmin and move the files .bash_logout, .bash_profile, .bash_rc from /home/nasadmin to newly created directory /home/sysadmin.
After it is copied, change the owner of this file using command: chown sysadmin:nasadmin <file name> for all the three files in sysadmin folder.
Also change the permission of the folder sysadmin using command: chown sysadmin:nasadmin <user folder name>.
After performing the above, confirm permission is correct using command: ls -la /home/sysadmin
drwx------ 2 sysadmin nasadmin 4096 Apr 21 2010 .
drwxr-xr-x 25 root root 4096 Oct 7 14:07 ..
-rw-r--r-- 1 sysadmin nasadmin 24 Apr 21 2010 .bash_logout
-rw-r--r-- 1 sysadmin nasadmin 789 Apr 21 2010 .bash_profile
-rw-r--r-- 1 sysadmin nasadmin 124 Apr 21 2010 .bashrc
For example: if user name is sysadmin, check whether directory sysadmin is present under home directory
If it is not present, create that directory using command: mkdir /home/sysadmin and move the files .bash_logout, .bash_profile, .bash_rc from /home/nasadmin to newly created directory /home/sysadmin.
After it is copied, change the owner of this file using command: chown sysadmin:nasadmin <file name> for all the three files in sysadmin folder.
Also change the permission of the folder sysadmin using command: chown sysadmin:nasadmin <user folder name>.
After performing the above, confirm permission is correct using command: ls -la /home/sysadmin
drwx------ 2 sysadmin nasadmin 4096 Apr 21 2010 .
drwxr-xr-x 25 root root 4096 Oct 7 14:07 ..
-rw-r--r-- 1 sysadmin nasadmin 24 Apr 21 2010 .bash_logout
-rw-r--r-- 1 sysadmin nasadmin 789 Apr 21 2010 .bash_profile
-rw-r--r-- 1 sysadmin nasadmin 124 Apr 21 2010 .bashrc
Additional Information
Due to creation of defunct users during failover\failback of CS, username might be sysadmin but folder created will be sysadmin1 or sysadmin2 based on number of defunct user created.
In case, you find defunct users in /nas/site/user_db, then confirm its associated folder name by login to CLI using sysadmin@storageDomain as it is Global user which will provide its associated folder name.
In case, you find defunct users in /nas/site/user_db, then confirm its associated folder name by login to CLI using sysadmin@storageDomain as it is Global user which will provide its associated folder name.
Affected Products
VNX1 SeriesProducts
VNX1 Series, VNX2 SeriesArticle Properties
Article Number: 000054783
Article Type: Solution
Last Modified: 11 Nov 2025
Version: 3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.