Docs

Elastic File Storage

User Guide

Managing permission groups

To ensure data security, you can use permission groups to limit file system access by IP address and control permissions for different addresses. This topic explains how to create permission groups and perform related operations.

Background information

When you create a file system, the console establishes a default permission group that grants access to the file system for any IP address within the same VPC.

The default permission group cannot be changed or removed, but you can create new permission groups and rules based on your business needs.

Notes

You can create up to 100 permission groups per file system type in one region.

A permission group can have up to 100 rules.

Creating a permission group

In the top menu bar, select the region where you want to create a permission group.

In the left navigation pane, click Permission groups.

On the Permission group list page, click Create permission group.

In the Create permission group dialog, configure the following parameters.

Parameter	Description
Permission group name	Set the name of the permission group. Naming rules: The permission group name cannot be 默认权限组. The permission group name must start with Chinese characters or English letters. The permission group name can only contain Chinese characters, letters, numbers, periods (.), underscores (_), or hyphens (-). Length must be between 1 and 128 characters.
Description	Provide additional information about the permission group to help you identify it later. Descriptions must: Start with Chinese characters, letters, or numbers. Contain only Chinese characters, letters, numbers, spaces, periods (.), underscores (_), hyphens (-), equal signs (=), English commas (,), Chinese commas (，), enumeration commas (、), or Chinese periods (。). Be between 0 and 255 characters long.

Click OK.

Configuring permission group rules

In the top menu bar, select the region of the permission group you want to configure.

In the left navigation pane, click Permission groups.

On the Permission group list page, click Manage rules in the operation column of the permission group.

tip

Alternatively, click the name of the permission group, which will take you to the Permission Rule tab.

On the Permission Rule tab, click Add rules and configure the following parameters.

Parameter	Description
Authorized address	Specify IP addresses or CIDR blocks that require access authorization.
Read/write permission	Specify which actions authorized addresses can perform on the file system under this rule: Read-only Read/write
Users' permissions	Select the permissions for users accessing the file system: Root user retention (no_root_squash): Allows root users to access the file system. Root user anonymous (root_squash): Maps root users accessing the file system to anonymous users by default. All visiting users are mapped to anonymous user or user groups (all_squash): Maps any user accessing the file system to anonymous users.

Click Save in the operation column.

Related operations

Operation	Steps
View permission group details	You can view the details of a permission group on the Permission group list page. These details include Permission group name/ID, Status, No.of rules, and Created at/creation time. Click the name of the permission group. Then, navigate to the Permission Rule tab to view its rules. Click the name of the permission group. Then, navigate to the Mount Target tab to view a list of associated mount targets. Click the name of the permission group. Then, navigate to the Access Point tab to view a list of associated access points.
Edit permission group information	Both Permission group name and Description are editable. Steps: Edit Permission group name On the Permission group list page, click the edit icon that appears next to Permission group name. In the box that appears, enter a new name. Click Save. Edit Description On the Permission group list page, click the edit icon that appears next to Description. In the box that appears, modify the description. Click Save.
Edit permission group rules	You can modify permission group rules. Steps: On the Permission group list page, click Manage rules in the operation column of the permission group. tip Alternatively, click the name of the permission group, which will take you to the Permission Rule tab. On the Permission Rule tab, modify the rule based on your needs. Click Save in the operation column.
Delete permission group rules	You can delete permission group rules. Steps: On the Permission group list page, click Manage rules in the operation column of the permission group. tip Alternatively, click the name of the permission group, which will take you to the Permission Rule tab. Click Delete in the operation column of the rule you want to remove.
Delete permission groups	You can delete unused permission groups. Steps: On the Permission group list page, click Delete in the operation column of the permission group you want to remove. In the box that appears, click OK.

Last updated: 2026.04.22 18:04:21