Hi @ThomasG 

May I have more information please? I don’t completely understand your query from a Commvault perspective.

Thanks.
Chris

Hi Chris,

customer wants to create a cloud library to use it for an auxcopy. To create this library or mountpath a user is needed to connect to Wasabi. The question is which permissions the user needs in Wasabi to connect. Is it possible to use a role with read and write permissions and not with admin permissions in Wasabi?

Thanks.

Thomas

Hi @ThomasG 

Thanks for clarifying.. Our books online site appears lacking this specific detail so I’ll get a request put in to get it updated.

For now, it’s essentially the same as S3, so we requiire these permissions:

"s3:CreateBucket",
"s3:GetBucketLocation",
"s3:GetObject",
"s3:PutObject",
"s3:PutObjectRetention",
"s3:PutObjectTagging",
"s3:ListBucket",
"s3:ListAllMyBuckets",
"s3:DeleteObject",
"s3:DeleteObjectVersion",
"s3:ListBucketVersions",
"s3:PutBucketObjectLockConfiguration"

https://documentation.commvault.com/2023e/expert/amazon_s3_aws_iam_role_policy.html

Please ask the customer to configure a user with these permissions and let us know how it goes.

Regards,

Chris ​

Hello Chris,

Thank you very much, we will test it.

Regards,

Thomas