Dell PowerVault NX3500 Administrator's Guide - Page 87

Setting Access Control Lists and Share Level Permissions on DSFS This section provides information about setting up access control lists (ACLs) and share level permissions (SLP) on Dell Scalable File System (DSFS). It is recommend that a Windows administrator follow the best practices as defined by Microsoft. Both ACLs and SLPs are supported by DSFS. However, SLPs are limited as they only address full control, change and read rights for any given user or group. You cannot use SLP and ACLs at the same time. CIFS Storage Administrator Account A built-in local CIFS storage administrator account serves the primary purpose of setting ownership of the CIFS share. The account can also be used to set ACLs when the NAS service is not joined to an Active Directory domain. This built-in account has a randomly generated password for security purposes. You must change this password before attempting to set any ACLs or SLPs. Active Directory Configuration DSFS has the ability to join an Active Directory domain. This can be done using the NAS Manager or the CLI. For more information, see "Synchronizing PowerVault NX3500 With a Local NTP Server" on page 122. Setting ACLs or SLPs on a CIFS Share The first time a CIFS share has been created, the owner of the share must be changed prior to setting any ACLs or attempting to access this share. If the PowerVault NX3500 is joined to an Active Directory domain, the following methods can be used for setting ACLs. • Using an Active Directory domain account that has its primary group set as the Domain Admins group. • Mapping a network drive to the CIFS share where ACLs are intended to be set. Using Volumes, Shares, and Quotas 87