1)
useradmin role add readonly1 -a api-aggr-list-*,api-cifs-share-list-iter-end,api-cifs-share-list-iter-next,api-cifs-share-list-iter-start,api-disk-list-*,api-fcp-adapter-list-info,api-file-read-file,api-fcp-service-status,api-ipspace-list-info,api-iscsi-service-status,api-license-list-info,api-lun-list-info,api-nfs-exportfs-list-rules,api-nfs-status,api-options-get,api-perf-object-counter-list-*,api-perf-object-get*,api-perf-object-instance-list-*,api-perf-object-list-*,api-quota-get-entry,api-quota-report-iter-end,api-quota-report-iter-next,api-quota-report-iter-start,api-snapshot-delta-info,api-snapshot-get-schedule,api-snapshot-list-*,api-snapshot-reserve-list-*,api-snapshot-autodelete-list-*,api-snmp-get,api-snmp-get-next,api-system-get-version,api-vfiler-get-*,api-vfiler-list-*,api-volume-get-language,api-volume-get-root-name,api-volume-list-*,api-useradmin-role-list,api-useradmin-group-list,api-useradmin-user-list,api-useradmin-domainuser-list,login-http-admin,api-system-cli,cli-cifs,api-system-available-replication-transfers,api-cifs-list-config,cli-vol,security-priv-advanced,api-lun-config-check-cfmode-info,cli-registry,api-aggr-check-spare-low,api-cifs-homedir-paths-get,api-cifs-top-iter-*,api-cifs-session-list-iter-*,api-cifs-share-list-iter-*,api-cifs-status,api-disk-sanown-list-info,api-file-get-file-info,api-file-list-directory-iter-*,api-igroup-list-info,api-iscsi-initiator-auth-list-info,api-iscsi-initiator-get-default-auth,api-iscsi-interface-list-info,api-iscsi-node-get-name,api-iscsi-portal-list-info,api-iscsi-target-alias-get-alias,api-iscsi-tpgroup-list-info,api-lun-get-comment,api-lun-initiator-list-map-info,api-lun-map-list-info,api-nfs-exportfs-list-rules-2
2)
useradmin role add readonly2 -a api-options-get,api-options-list-info,api-options-set,api-qtree-list-iter-*,api-registry-get,api-registry-list-info,api-snapmirror-get-status,api-snapmirror-list-connections,api-snapmirror-list-schedule,api-snapshot-autodelete-list-info,api-snapshot-list-info,api-snmp-get,api-snmp-status,api-system-cli,api-system-get-*,api-useradmin-group-list,api-useradmin-role-list,api-useradmin-user-list,api-volume-autosize-get,api-volume-get-language,api-volume-get-root-name,api-volume-list-info,api-volume-options-list-info,cli-cifs,cli-date,cli-ifconfig,cli-priv,cli-stty,cli-timezone,cli-uptime,login-http-admin,security-priv-advanced,api-cf-status,api-net-config-get*,cli-options,cli-vfiler,api-storage-disk-get*,api-clock-get*,api-diagnosis-config-get*,api-diagnosis-alert-get*
3)
useradmin group add readonlygroup -c "Read Only Group" -r readonly1,readonly2
Other Data Ontap Versions APIs List
https://kb.netapp.com/support/s/article/ka31A000000120KQAQ/how-to-create-a-read-only-user-to-monitor-a-storage-system-in-oncommand-system-manager-oncommand-unified-manager-and-performance-advisor?language=en_US
https://www.youtube.com/watch?v=GfNBzxx6C9o
Read more...