diff --git a/conf/rest/9.12.0/mediator.yaml b/conf/rest/9.12.0/mediator.yaml
new file mode 100644
index 000000000..27c5058c6
--- /dev/null
+++ b/conf/rest/9.12.0/mediator.yaml
@@ -0,0 +1,22 @@
+
+name:               Mediator
+query:              api/cluster/mediators
+object:             mediator
+
+counters:
+  - ^^uuid                       => uuid
+  - ^ip_address                  => ip_address
+  - ^peer_cluster.name           => peer_name
+  - ^peer_mediator_connectivity  => peer_connectivity
+  - ^port                        => port
+  - ^reachable                   => reachable
+
+export_options:
+  instance_keys:
+    - uuid
+  instance_labels:
+    - ip_address
+    - peer_connectivity
+    - peer_name
+    - port
+    - reachable
diff --git a/conf/rest/default.yaml b/conf/rest/default.yaml
index 7483d542e..f363408f4 100644
--- a/conf/rest/default.yaml
+++ b/conf/rest/default.yaml
@@ -22,6 +22,7 @@ objects:
   LIF:                         lif.yaml
   Health:                      health.yaml
   Lun:                         lun.yaml
+#  Mediator:                    mediator.yaml
   Namespace:                   namespace.yaml
 #  NetConnections:              netconnections.yaml
 #  NetPort:                     netport.yaml
diff --git a/docs/prepare-cdot-clusters.md b/docs/prepare-cdot-clusters.md
index 86e9316b5..b8d3441b5 100644
--- a/docs/prepare-cdot-clusters.md
+++ b/docs/prepare-cdot-clusters.md
@@ -91,7 +91,8 @@ Warnings are fine.
 
 ```bash
 security login role create -role harvest2-role -access readonly -cmddirname "cluster"
-security login role create -role harvest2-role -access readonly -cmddirname "lun"    
+security login role create -role harvest2-role -access readonly -cmddirname "lun"
+security login role create -role harvest2-role -access readonly -cmddirname "metrocluster configuration-settings mediator add"
 security login role create -role harvest2-role -access readonly -cmddirname "network interface"
 security login role create -role harvest2-role -access readonly -cmddirname "qos adaptive-policy-group"
 security login role create -role harvest2-role -access readonly -cmddirname "qos policy-group"
@@ -100,11 +101,12 @@ security login role create -role harvest2-role -access readonly -cmddirname "sec
 security login role create -role harvest2-role -access readonly -cmddirname "snapmirror"
 security login role create -role harvest2-role -access readonly -cmddirname "statistics"
 security login role create -role harvest2-role -access readonly -cmddirname "storage aggregate"
-security login role create -role harvest2-role -access readonly -cmddirname "storage disk"     
+security login role create -role harvest2-role -access readonly -cmddirname "storage disk"
 security login role create -role harvest2-role -access readonly -cmddirname "storage encryption disk"
+security login role create -role harvest2-role -access readonly -cmddirname "storage iscsi-initiator show"
 security login role create -role harvest2-role -access readonly -cmddirname "storage shelf"
-security login role create -role harvest2-role -access readonly -cmddirname "system health status show" 
-security login role create -role harvest2-role -access readonly -cmddirname "system health subsystem show"  
+security login role create -role harvest2-role -access readonly -cmddirname "system health status show"
+security login role create -role harvest2-role -access readonly -cmddirname "system health subsystem show"
 security login role create -role harvest2-role -access readonly -cmddirname "system node"
 security login role create -role harvest2-role -access readonly -cmddirname "version"
 security login role create -role harvest2-role -access readonly -cmddirname "volume"