Create Account

Explains how to create object store account within a domain.

Using the CLI

Use the mc admin account create command to create an account.

Using the Object Store Interface

You can create an object store account using the Object Store UI.
NOTE
You can enable erasure coding via the UI. When you turn on erasure coding you can select the erasure coding topology and, optionally, enable local parity. The erasure coding scheme is without local parity, by default. If you wish to disable erasure coding, you can disable it via the command line only.
While creating an account, you must provide the following information.
  • unique name for the account. The name must be unique across the cluster.
  • user who is to be designated as the administrator for the account to be created. Only one user can be designated as an administrator.
  • disk quota for the account
  • topology, that is, the location of the volume to which the account belongs.
  • default bucket policy for the account
  • access control list(ACL) policy for objects associated with the account.
    NOTE
    You can either fill in the policy or select a JSON file containing the policy. For an example ACL policy, see Access Policies. You may also want to review Administering Account Resources.
  • erasure coding(EC) details
    • if erasure coding is enabled, labels for erasure coded volume, EC topology, enabling or disabling of local parity, EC scheme, number of data and parity fragments(global parity fragments and local parity fragments, if local parity is enabled)
  • minimum replication factor, that is, the minimum number of copies of the volume to be maintained by the cluster for normal operation
  • desired replication factor, that is, the desired number of copies of the volume to be maintained by the cluster for normal operation
  • storage label to confine volumes to specific pools to meet objectives such as low latency
  • label for meta containers and namespace containers and corresponding bucket volumes
    NOTE
    See Erasure Coding Scheme for Data Protection and Recovery for details on configuring erasure coding while creating the account.
To create an account:
  1. Login to the Object Store interface as the administrator or as the root user.
  2. Click the menu bar in the top left corner and go to Administration > Accounts
  3. Click Create Account.
  4. Enter the name for the account.
  5. Specify the LDAP user that must be designated as the administrator for the account.
  6. Set the total disk quota size in either GB or MB for the account. All the buckets and objects associated with the account add up to this quota.
  7. Set the default bucket policy for all buckets in the account. You can either fill in the policy or select a JSON file that contains the policy.
  8. Set the default ACL for objects in the account.
  9. Turn on the Erasure Coding toggle under Storage Policy Settings to enable erasure coding on the cluster.
  10. Enter the topology.
  11. If you have enabled erasure coding, select the EC topology (the location of the erasure-coded volume to which this account belongs).
  12. Specify the Erasure Coding Scheme. All buckets use the specified scheme.
  13. If you have enabled erasure coding and wish to enable local parity, turn on the Local Parity Scheme toggle.
  14. Enter the number of data fragments, the number parity fragments. If you have enabled local parity, enter the number of data fragments, the number of global parity fragments, and the number of local parity fragments.
  15. Select the desired replication factor for buckets and objects within this account.
  16. Enter a label for storage classification. All buckets and objects inherit this storage label and are placed on the appropriate disks based on this label.
  17. Enter the label for Erasure Coded volumes and a meta label.
  18. Click Create Account.

The object store account is created successfully. You can view the newly created account in the accounts list.

Click the menu bar in the top left corner and go to Administration > Accounts to view the Accounts page which lists all the available accounts.

After creating an account, you can create IAM users and buckets for the account. In the Action column, click … to see the operations you can perform on the account.