Decide NetApp LDAP volume behavior before creating or cloning the volume

Source facts

Azure NetApp Files does not allow changing a volume’s LDAP option after creation. Microsoft also excludes creating an LDAP-enabled volume from a snapshot of an LDAP-disabled volume. Its documented alternative for that snapshot is another LDAP-disabled volume. An SMB volume cannot be created with the LDAP flag enabled; that option applies to NFS volumes. Microsoft Learn.

Applicability

Use this check for the volume-level LDAP setting and a proposed snapshot-based volume creation. Do not confuse that flag with the wider Active Directory connection or ordinary SMB authentication requirements.

DSE recommendation

Record the intended LDAP behavior in the volume design before provisioning. Have the storage and identity owners compare the source volume’s actual setting with the intended destination. Treat a mismatch as a design question, not a transient deployment error to retry indefinitely. If the required configuration differs, stop the clone plan and obtain a supported migration approach before changing data placement. Preserve the original volume and its recovery information while evaluating alternatives.

Verification

In an approved test, inspect the source volume’s LDAP setting and identify the exact snapshot selected. Compare the proposed destination parameters with those constraints before submitting creation. After an accepted creation, check the resulting volume and authorized NFS access against the approved design. Keep any failed request and its parameter set so later reviewers can distinguish an incompatible configuration from a connectivity fault.

Official references

Microsoft Learn: Troubleshoot volume errors for Azure NetApp Files.