Object users

Object users are end-users of the ECS object store, and they access ECS through object clients that are using the object protocols that ECS supports (S3, EMC Atmos, Openstack Swift, and CAS). Object users can also be assigned Unix-style permissions to access buckets exported as file systems for HDFS.

A management user (System or Namespace Administrator) can create an object user. The management user defines a username and assigns a secret key to the object user when the user is created or at any time thereafter. A username can be a local name or a domain-style username that includes @ in the name. The object user uses the secret key to access the ECS object store. The object user's secret key is distributed by email or other means.

Users that are added to ECS as domain users can subsequently add themselves as object users by creating their own secret key using the ECS self-service capability through a client that communicates with the ECS Management REST API. The object username that they are given is the same as their domain name. Object users do not have access to the ECS Portal. For more information about domain users, see the Domain and local users. For information on creating a secret key, see the ECS Data Access Guide, available from the ECS Product Documentation page.

Object users are global resources. An object user can have privileges to read and write buckets, and objects within the namespace to which they are assigned, from any VDC.