Permissions can be set based on:

  • Users (including a guest access option)
  • Groups
  • Gateways


There are available three permission levels:

  • Read/Write (RW)
  • Read-Only (RO)
  • No Access (NO)


The access permission for a particular user will be determined by the most restrictive permission control. For example, if a user has Read/Write permission to a share, but the gateway has Read-Only access to the share, then the user will only be able to read.



User and Group Permissions

Set the SMB share access permissions by users and groups.


Note: In Active Directory, Azure AD, Azure AD Domain Services, On-Promises LDAP and IDaaS modes, admins must first import users and groups before they will appear in this tab.



Default Access

The permissions for all users in the system.


Read/WriteUsers can read and write files to the share. Users must be authenticated to access the share. Admins can specify users/groups to a Read Only exclusion list.
Read OnlyUsers can read files from the share. Users must be authenticated to access the share. Admins can specify users/groups to a Read/Write exclusion list.
No AccessUsers cannot see the share. Admins can specify a Read Only and Read/Write exclusion lists.


Allow Guest Access

If Allow Guest Access is enabled, users that log in with a non-existent account will automatically be allowed access to the share as the guest user.


Exception List

Use exceptions to set Read/Write or Read-Only access for specific users and groups. By default, both users and groups are listed in this section. You may filter the list by name or by type (User, Group, or All).


Forbid Share Link

Prevents the user from sharing links to files using the sharing option in the Files section.



Edit Gateway Permissions

Set which gateway has access to the share. By restricting gateway permissions, you are creating access restrictions based on location. 


Sync Share


Access

The Access column set the access permissions for the share. The available options are:

  • Read/Write (RW)
  • Read-Only (RO)
  • No Access (NO)


Prefetch

Check the Prefetch box to force the gateway to download all new and modified files immediately. This allows a user to access new and modified files from the local cache without waiting for a download from the cloud.  If prefetch is not enabled, files that are not in the cache will not be downloaded until they are accessed.



Replicate Share

Source gateway

Source gateway has Read/Write permission for the share.


Additional Destinations

  • Access - Check the Access box to grant Read-Only permission to the gateway for the share.
  • Prefetch - Check the Prefetch box to force the gateway to download all new and modified files immediately. This allows a user to access new and modified files from the local cache without waiting for a download from the cloud.  If prefetch is not enabled, files that are not in the cache will not be downloaded until they are accessed.



Archive Share


Source gateway

Source gateway has Read/Write permission for the share.


Add a Hot Standby device

For share, you can add a hot standby device to an existing source gateway for high availability. With a hot standby device, the source gateway will transfer files to the hot standby device in addition to uploading to the cloud. When the source device fails and cannot be used, you can switch the hot standby device to become the source gateway. If the previous source gateway is offline, you need to delete the previous source gateway before changing the hot standby device to the source gateway. With a hot standby device, you don't need to wait to add a new device as the source gateway and wait for the new device to download the file system from the cloud.  

  • Access - Check the Access box to add a hot standby device for the current source device, hot standby device has Read-Only permission for the share.
  • Prefetch - When the Prefetch box is checked, the source gateway will transfer the real files (not stub files) to the hot standby device when the archive job starts. Otherwise, the source gateway will transfer the stub files to the hot standby device when the archive job starts to save space on the hot standby device.


Please note that only one device can be added as the hot standby device, and this device must be on the same network as the current source gateway.