Managing Local Users

Prev Next

VAST Cluster features a local provider. The local provider enables you to add users and manage them manually via VMS rather than adding them to an external authentication and authorization provider, such as Active Directory or LDAP. This feature is useful for:

  • Adding users when you do not have an external provider configured.

  • Adding POSIX attributes for a user which is defined on Active Directory without POSIX attributes. In this case, use the same user name as is used on Active Directory so that the user database will associate these attributes to the same user.

  • Adding users to manually override incorrect or outdated POSIX attributes on external providers.

In case of any conflict between user POSIX attributes on any external authorization provider and the local provider, the local provider attributes override the non-local provider. For more details, see Overview of User Management and Authorization.

Creating a Local User in VAST Web UI

  1. From the left navigation menu, choose User Management and then Users.

  2. In the Users page that opens, click Create User and complete the following fields:

    Name (required)

    The user name.

    UID (required)

    The user's POSIX UID.

    Notice

    This field is required starting with VAST Cluster 5.3.2. When using a version prior to version 5.3.2, this field is optional.

    Leading group

    The name of the user's leading group.

    This is the group assigned by default as the owning group of any files created by the user.

    Select the group from the dropdown. If the group has not been added to the local provider, add the group first.

    Groups

    Names of other groups that the user belongs to beside the leading group. Also known as auxiliary groups.

    Select groups from the dropdown. If a group has not been added to the local provider, add the group first.

    Allow Create Bucket

    Enable this setting to give the user permission to create S3 buckets.

    Disabled by default.

    See Managing User S3 Permissions.

    Allow Delete Bucket

    Enable this setting to give the user permission to delete S3 buckets.

    Disabled by default.

    See Managing User S3 Permissions.

    Identity Policies

    Optionally, select one or more S3 identity policies to assign to the user. If needed, click Add Identity Policy to  create a policy first.Creating Identity Policies

  3. Click Create. The user is created. Once the user is created, you update it and add S3 access keys to it. Follow the steps in Modifying a User in VAST Web UI.

Modifying a User in VAST Web UI

  1. From the left navigation menu, choose User Management and then Users.

  2. In the Users page that opens, right-click the user, and select Edit.

  3. In the Update User dialog that opens, make the changes you need and click Update, including adding S3 access keys.

    The user is updated with the changes.

Removing a User in VAST Web UI

  1. From the left navigation menu, choose User Management and then Users.

  2. In the Users page that opens, right-click the user that you want to edit and select Remove.

  3. In the confirmation popup, click Yes to confirm the removal.

    The user is deleted from the local provider.

Querying a Local User in VAST Web UI

See Querying Users.