commvault.com commvault.com
Question

Wasabi access with restricted permisions

  • 20 December 2023
  • 4 replies
  • 55 views
T
Rank
Userlevel 1
Badge +8

Hello,

is there a documentation of the needed permission to access Wasabi cloud storage? Customer does not want to assign admin permissions to the user.

 

Thank you.

4 replies

Chris Hollis
Rank
Userlevel 6
Badge +15

Hi @ThomasG 

May I have more information please? I don’t completely understand your query from a Commvault perspective.

Thanks.
Chris

T
Rank
Userlevel 1
Badge +8

Hi Chris,

customer wants to create a cloud library to use it for an auxcopy. To create this library or mountpath a user is needed to connect to Wasabi. The question is which permissions the user needs in Wasabi to connect. Is it possible to use a role with read and write permissions and not with admin permissions in Wasabi?

Thanks.

Thomas

Chris Hollis
Rank
Userlevel 6
Badge +15

Hi @ThomasG 

Thanks for clarifying.. Our books online site appears lacking this specific detail so I’ll get a request put in to get it updated.

For now, it’s essentially the same as S3, so we requiire these permissions:

"s3:CreateBucket",
"s3:GetBucketLocation",
"s3:GetObject",
"s3:PutObject",
"s3:PutObjectRetention",
"s3:PutObjectTagging",
"s3:ListBucket",
"s3:ListAllMyBuckets",
"s3:DeleteObject",
"s3:DeleteObjectVersion",
"s3:ListBucketVersions",
"s3:PutBucketObjectLockConfiguration"

https://documentation.commvault.com/2023e/expert/amazon_s3_aws_iam_role_policy.html


Please ask the customer to configure a user with these permissions and let us know how it goes.

Regards,

Chris ​

 

 

 

T
Rank
Userlevel 1
Badge +8

Hello Chris,

Thank you very much, we will test it.

 

Regards,

Thomas

Reply


Terms & ConditionsCookie settings