Symptoms

Array had both symauth and symacl enabledFound following errors in symapi.log: 08/05/2022 00:33:34.580 15624 17628 EMC:SYMCFG read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545 08/05/2022 00:33:35.511 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545 08/05/2022 00:33:36.527 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545 08/05/2022 00:33:37.543 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545 08/05/2022 00:33:38.558 9944 20468 EMC:SYMSNAPVX Failed to load information. remote: 0, remote_hop_num: 0, retries: 3, sts: SYMAPI_C_ACCESS_DENIED - error msg: Symmetrix access control denied the request 08/05/2022 00:33:39.426 19788 20016 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545 Above error indicates issue with symauth. However, checked "symauth show -username" and verified the same user is seen in "symauth -sid list -users" Also checked "symacl -sid show accgroup Admingrp" and verified that host is part of symacl AdminGrp.Tried to sync by running "symcfg sync -sid " however, sync failed with error "Symmetrix access control denied the request".

Cause

symacl access issue

Resolution

Run "symacl -sid XXX show accgroup AdminGrp -acl" and check if AdminGrp has necessary access type C:\>symacl -sid XXX show accgroup AdminGrp -acl Symmetrix ID: 000197XXXX Group Name Pool Name Access Type ---------------------------------- --------------------------------- ----------- AdminGrp ALL_DEVS ADMIN AdminGrp ALL_DEVS ALL In above output we can see AdminGrp has access type ADMIN and ALL., we will need to add other appropriate access to run commands for example BASE and BASECTRL to run other commands.Refer Array control and Management guide for more information about Available access control permissions : https://dl.dell.com/content/docu95463Command to grant permissions to access group: symacl -sid commit -file Where file contains: grant access=AccessType to accgroup GroupName for accpool PoolName | ALL | NON-POOLED devs Once BASE and BASECTRL access was granted to AdminGrp we were able to execute commands without any error. C:\>symacl -sid XXX show accgroup AdminGrp -acl Symmetrix ID: 00019XXXXXX Group Name Pool Name Access Type ---------------------------------- --------------------------------- ----------- AdminGrp ALL_DEVS ADMIN AdminGrp ALL_DEVS ALL AdminGrp ALL_DEVS BASECTRL AdminGrp ALL_DEVS BASE

Support Cases