top of page

Nexfs Content Server (S3 API) Documentation

Content Server Users and Accounts (IMS)

Previous
Next

Content (S3) Server User and Accounts


Accounts are required to access the Content (S3) Server.


Accounts can be created using the Management Console or the Management API. For details on creating and managing accounts through the Management Console, refer to the Nexfs Identity Management System documentation


Anonymous access is supported but requires an anonymous user to be created and mapped to a POSIX user ID and group. Once an anonymous user is created and assigned the required User Content Roles, the Nexfs configuration setting ANONYMOUSUSERID must be updated. This can be done by setting the "Anonymous User ID" in the Advanced Settings section of Nexfs Configuration in the management console.


Nexfs does not include any default Content Server accounts, but it does include one "User Content Role" titled "Nexfs Default Allow All User Role" which grants full Content Server (S3) access to any user assigned that role. This default role can be deleted, and new roles can be created as needed..


A user can be assigned up to 16 Content Roles, each of which can include one or more allowed or denied actions. A user must have a role that includes a specific action to be able to perform that action. If any role assigned to a user explicitly denies an action, the user is denied that action even if they have another role that allows it.


For ease of use, Content Server actions match the actions required and documented by AWS S3. For example, to use GetObject, a user must have the s3:GetObject access to the object (or version). access to the object (or version). If you grant READ access to the anonymous user, the GetObject operation returns the object without requiring an authorization header..


Note that although an account can have both Content Server and Management API access rights, a separate secret must be set for each. See the Nexfs Identity Management System documentation for more details.





bottom of page