Manage SubUsers

SubUsers let you share access to FPT Object Storage without handing out your Admin Access Key. Use a SubUser for each person or application that needs limited access.

note

SubUsers are not available on the HCM-04 cluster. On HCM-04, use IAM Users and Roles instead.

Supported roles

Role	Access
None	No access.
Read	Read data in buckets.
Write	Write data to buckets.
Read - Write	Read and write data.
Full	Full permissions, including bucket configuration.

A role applies to all buckets in the account. To limit a SubUser to specific buckets, assign the None role and grant access with a Bucket Policy. See Grant per-bucket access to SubUsers.

Create a SubUser

1. Go to Object Storage → SubUser, then select a Region.
2. Click Create SubUser.
3. Enter a Name that is easy to recognize, and select an Access level.
4. Click Create.

Change the role of a SubUser

1. In the SubUser list, select Detail for the SubUser.
2. Select a new role in Access level.
3. Click Save.

Create an Access Key for a SubUser

Each SubUser can have up to 2 Access Key pairs.

1. Open Detail for the SubUser.
2. Click Generate Key. The system generates an Access Key and a Secret Key.
3. Copy both values and store them in a safe place.
4. Click Confirm access key.

note

The Secret Key is shown only once, when the key is created.

Delete an Access Key of a SubUser

1. Open Detail for the SubUser.
2. In the Action column of the key, select Delete.
3. Confirm the deletion.

warning

Every client that uses the key loses access immediately.

Delete a SubUser

1. In the SubUser list, select Delete next to the SubUser.
2. Confirm the deletion in the warning dialog.