{"id":2877,"date":"2021-12-26T12:35:02","date_gmt":"2021-12-26T20:35:02","guid":{"rendered":"https:\/\/192.168.1.30\/wordpress\/?p=2877"},"modified":"2021-12-26T13:46:00","modified_gmt":"2021-12-26T21:46:00","slug":"access-control","status":"publish","type":"post","link":"https:\/\/spiffynasty.com\/blahblahblah\/access-control\/","title":{"rendered":"Access Control"},"content":{"rendered":"

Introduction to Access Control<\/h2>\n

https:\/\/www.asustor.com\/en\/online\/College_topic?topic=110<\/a><\/p>\n

COURSE OBJECTIVES<\/strong>
\nUpon completion of this course you should be able to:
\n\\1. Create and manage users, groups, shared folders and privileges on an ASUSTOR NAS
\n\\2. How to set up and use Access Control<\/p>\n

PREREQUISITES<\/strong>
\n*Course Prerequisites:*<\/strong>
\nNone
\n*Students are expected to have a working knowledge of:*<\/strong>
\nNone<\/p>\n

OUTLINE<\/strong>
\n1. Introducing Access Control<\/a>
\n1.1 What is Access Control?<\/a>
\n1.2 What are the differences between admin rights and user rights?<\/a>
\n2. How to set up Access Control?<\/a>
\n2.1 Local Users<\/a>
\n2.2 Local Groups<\/a>
\n2.3 AD \/LDAP<\/a>
\n2.4 Shared Folders<\/a>
\n2.5 App Privileges<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

\n

1.<\/strong> Introducing Access Control<\/strong><\/p>\n

1.1<\/strong> What is Access Control?<\/strong>
\nAccess Control manages shared folder and app permissions for multiple users and groups on an ASUSTOR NAS. ASUSTOR NAS devices offer permission settings in the event multiple people use a NAS and information needs to be separated, such as when confidential information is stored. Rights and permissions can be customised based on a user\u2019s needs.
\n1.2 *What are the differences between admin rights and user rights?*<\/em><\/strong><\/p>\n

The admin account and admin rights are the default setting when purchasing an ASUSTOR NAS, while user group accounts can only access certain folders and apps as designated by an administrator.<\/p>\n

 <\/p>\n

About Local Users<\/strong><\/p>\n

After initialisation, ADM automatically creates an admin account as well as a guest account. The default admin account can either be left as is or renamed and comes with full rights within the NAS while the guest account has restrictions and only is able to use SAMBA and AFP. Guest account cannot log into ADM and password cannot be changed.<\/p>\n

\"img\"<\/p>\n

About Local Groups<\/strong>
\nAfter initialisation, two user groups are automatically created, named Administrators and Users. Administrators is the default group. If a user is added to this group, they will possess a majority of the administrator access rights. Admin belongs to the Administrators group by default and cannot be removed from it.
\n\"img\"<\/p>\n

2. Setting up Access Control<\/strong><\/p>\n

2.1. Local Users
\n<\/strong>Add, edit and remove local users here. Rights can also be assigned, edited and removed.<\/p>\n

 <\/p>\n

2.1.1 Adding a user and assigning rights<\/strong>
\n\\1. Add a new user by clicking Add.<\/p>\n

 <\/p>\n

 <\/p>\n

\"img\"<\/p>\n

 <\/p>\n

2.Fill out user information\"img\"<\/p>\n

 <\/p>\n

3.Select whether the user receives customized access rights or is an administrator. Selecting the first option will open options to assign rights.<\/p>\n

\"img\"<\/p>\n

 <\/p>\n

 <\/p>\n

\"img\"<\/p>\n

\\4. Assign shared folder access rights here.\"img\"<\/p>\n

 <\/p>\n

DA: Deny Access<\/p>\n

RW: Read & Write<\/p>\n

RO: Read Only<\/p>\n

Priority of access rights: Deny Access > Read & Write > Read Only > No settings<\/p>\n

 <\/p>\n

 <\/p>\n

\\5. Quotas can be set here. Btrfs volumes do not support quotas. \"img\"<\/p>\n

 <\/p>\n

 <\/p>\n

\\6. Assign app privileges as needed and user creation is now complete.<\/p>\n

\"img\"<\/p>\n

 <\/p>\n

 <\/p>\n

\"img\"<\/p>\n

\"img\"<\/p>\n

 <\/p>\n

2.1.2. Editing user details and access rights
\nHighlight a user and click edit to edit user information.
\n<\/strong><\/p>\n

 <\/p>\n

\"img\"<\/strong><\/p>\n

**
\n**<\/p>\n

Click Groups to modify a user\u2019s group or assign a new one.<\/strong><\/p>\n

\"img\"<\/strong><\/p>\n

**
\n**<\/p>\n

Click Folder Access Rights to modify rights.<\/strong><\/p>\n

\"img\"<\/strong><\/p>\n

DA: Deny Access<\/strong><\/p>\n

RW: Read & Write<\/strong><\/p>\n

RO: Read Only<\/strong><\/p>\n

Priority of access rights: Deny Access > Read & Write > Read Only > No settings<\/strong><\/p>\n

\"img\"
\n<\/strong><\/p>\n

**
\n**<\/p>\n

\"1\" *: User access rights for shared folders*<\/em><\/strong><\/p>\n

\"2\" *: Group access rights for shared folders*<\/em><\/strong><\/p>\n

 <\/p>\n

Click quotas to modify quotas for the user.<\/strong><\/p>\n

 <\/p>\n

\"img\"<\/strong><\/p>\n

*2.2. Local Groups*<\/strong><\/em><\/p>\n

Click Local Groups to add, modify and remove local groups.<\/p>\n

Reminder: ASUSTOR recommends reserving groups for large numbers of users.<\/p>\n

**
\n**<\/p>\n

*2.2.1*<\/em> *Adding local groups and assigning rights*<\/em><\/strong><\/p>\n

\\1. Click Add to create a new local group.<\/p>\n

\"img\"
\n<\/strong><\/p>\n

**
\n**<\/p>\n

\\2. Fill in the group name, a description and select a Group ID.<\/p>\n

\"img\"
\n<\/strong><\/p>\n

**
\n**<\/p>\n

\\3. Select one or more users to join the new group.<\/p>\n

\"img\"
\n<\/strong><\/p>\n

**
\n**<\/p>\n

\\4. Assign folder access rights for the group and review settings.<\/p>\n

\"img\"
\n<\/strong><\/p>\n

DA: Deny Access<\/strong><\/p>\n

RW: Read & Write<\/strong><\/p>\n

RO: Read Only<\/strong><\/p>\n

Priority of access rights: Deny Access > Read & Write > Read Only > No settings<\/strong><\/p>\n

\"img\"
\n<\/strong><\/p>\n

\"img\"
\n<\/strong><\/p>\n

**
\n**<\/p>\n

**
\n**<\/p>\n

*2.2.2*<\/em> *Editing group information and modifying rights.*<\/em><\/strong><\/p>\n

Edit group<\/strong><\/p>\n

 <\/p>\n

\"img\"
\n<\/strong><\/p>\n

Edit members<\/strong><\/p>\n

 <\/p>\n

\"img\"
\n<\/strong><\/p>\n

Edit Folder-Access Rights<\/strong><\/p>\n

\"img\"
\n<\/strong><\/p>\n

DA: Deny Access (Deny Access for group to access folder)<\/p>\n

RW: Read & Write (Group can Read & Write the folder)<\/p>\n

RO: Read Only (Folder Read Only for the group)<\/p>\n

Priority of access rights: Deny Access > Read & Write > Read Only > No settings<\/p>\n

 <\/p>\n

2.3 *AD\/LDAP*<\/em><\/strong><\/p>\n

 <\/p>\n

If you are using Windows Active Directory (hereafter referred to as "AD"), you can add your NAS to your AD domain.<\/p>\n

Windows Active Directory: After successfully adding your NAS to an Active Directory domain, you can then configure access rights using domain users, domain groups and shared folders settings using the Access Control app. Active Directory users can then use their own Active Directory accounts to log in and access the NAS.<\/p>\n

Lightweight Directory Access Protocol (LDAP): LDAP, also known as Lightweight Directory Access Protocol is mainly used for unified management of accounts and passwords. Using LDAP can more efficiently manage user authentication or computer resource permissions across the enterprise. Users can easily add an ASUSTOR NAS to their existing LDAP server, providing easier ways to help manage productivity.<\/p>\n

*\"img\"
\n*<\/strong><\/em><\/p>\n

Reminder: ASUSTOR NAS can support more than 200,000 AD users and groups. When joining an AD domain for the first time, depending on the number of users and groups, it may take a while for all of them to become visible.<\/p>\n

*<\/em>*More
\n****NAS 206 – Using NAS with Windows Active Directory<\/a>****<\/strong><\/p>\n

*
\n*<\/strong><\/em><\/p>\n

2.4. Shared Folders<\/strong><\/p>\n

 <\/p>\n

Here you can manage your shared folders and set up their access rights in relation to users and user groups. Shared folders allow your NAS to become a file server. They are fundamental in sharing files with the outside world. Consequently, correctly setting up their access rights is very important in the management of your data.<\/p>\n

After initialization, the system will automatically create a shared folder "public". By default, all users can access the files in this folder. Additionally, the system will automatically create a personal folder for each user (using the user's account name) that by default, can only be accessed by the mentioned user.
\n2.4.1 How to add shared folders and set up the access rights?<\/p>\n

\\1. Add<\/p>\n

\"img\"<\/p>\n

\\2. Fill out the information<\/p>\n

\"img\"<\/p>\n

Note: Here are three optional options for user to choose.<\/p>\n

 <\/p>\n

 <\/p>\n