clustergroup updates3user

Updates permissions for external S3 server.

As a cluster administrator, you can perform the following operations on an external S3 server that has been imported into Data Fabric.

  • add access to users and/or groups
  • revoke access from users and/or groups
  • change the owner
    NOTE
    When you change the owner, the new owner must be granted the cs3 ACL. The cs3 ACL will enable to new owner to connect the the external S3 server.
Use the clustergroup updates3user CLI command to perform the aforementioned operations on an external S3 server that has been imported into Data Fabric.

Syntax

CLI 
maprcli clustergroup updates3user
   - externalservername name of the external server
   - action addaccessors/removeaccessors/updateowner
   [- accessorusers comma separated list of accessor users]
   [- accessorgroups comma separated list of accessor groups]
   [- owner owner name]
Request Type POST
Request URL 
http[s]://<host>:<port>/rest/clustergroup/updates3user?<parameters>

Parameters

Parameter Description

externalservername

(Required) The name of the imported external S3 server on which you wish to grant or revoke user access or group access or change owner.

action

(Required) Permissible values for this parameter are as follows:

  • addaccessors - Use this value to add one or more users and/or groups as accessors that can access the external S3 server.
  • removeaccessors - Use this value to remove access that was previously granted to one or more users and/or groups on the external S3 server
  • updateowner - Use this value to update the owner of the imported external S3 server.
accessorusers (Optional) Enter a comma-separated list of users that you wish to provide access to or revoke access on the external S3 server. You could specify the accessorgroups when the value of action parameter is addaccessors or removeaccessors.
accessorgroups (Optional) Enter a comma-separated list of groups that you wish to provide access to or revoke access on the external S3 server. You could specify the accessorgroups when the value of action parameter is addaccessors or removeaccessors.
owner (Optional) Enter the name of the new owner for the imported external S3 server. Specify the owner when the value of action parameter is updateowner.

Example

NOTE
You can use the clustergroup get cgtable command, to view changes in the ownership and access to the external S3 server details, after the clustergroup updates3user command runs successfully.

Change owner for external S3 server

Change the owner on 'ext1' external S3 server to 'johndoe'.

CLI 
maprcli clustergroup updates3user -externalservername ext1 -action updateowner -owner johndoe -json
REST 
curl -u <username> -X POST https://server.sj.us:8443/rest/clustergroup/updates3user?externalservername=ext1&action=updateowner&owner=johndoe

Grant access on external S3 server for user and group

Grant access on 'ext1' external S3 server to user, 'janedoe', and groups, 'sales' and 'qa'.

CLI 
maprcli clustergroup updates3user -externalservername ext1 -action addaccessors -accessorusers janedoe - accessorgroups sales,qa -json
REST 
curl -u <username> -X POST https://server.sj.us:8443/rest/clustergroup/updates3user?externalservername=ext1&action=addaccessors&accessorusers=janedoe&accessorgroups=sales,qa

Revoke access on external S3 server for group

Revoke access on 'ext2' external S3 server for groups, 'sales' and 'qa'.

CLI 
maprcli clustergroup updates3user -externalservername ext2 -action removeaccessors - accessorgroups sales,qa -json
REST 
curl -u <username> -X POST https://server.sj.us:8443/rest/clustergroup/updates3user?externalservername=ext2&action=removeaccessors&accessorgroups=sales,qa