Permission Group Management
Create Permission Group
Sign in to the Baidu AI Cloud CFS service management console, click Permission Group in the left navigation bar to access the CFS Permission Group page.
On the CFS Permission Group page, click "Create Permission Group," then input the group name and description in the pop-up window to finalize creation.
Newly created permission groups will appear in the permission group list, where you can manage and delete existing groups as needed.
Add permission group rules
Click on the permission group name to open its details page, where you can view the list of rules and edit or delete them as required.
Click "Create Rule," then configure the authorization address, permissions, user scope, and priority for the rule in the pop-up window to complete the setup.
The detailed description of permission group rule settings is as follows:
| Field | Description |
|---|---|
| Authorization address | Virtual machine VPC IP: You can enter either a single IP address (e.g., 10.10.1.123) or a network segment (e.g., 192.168.3.0/24). |
| Permissions | Read-only or read-write access determines whether authorized objects can access the file system with limited or full permissions. |
| User scope | Set access restrictions to the file system based on user roles: 1) No restriction for root users, allowing full access; 2) Restriction for root users, mapping them as anonymous users; 3) Restriction for all users, mapping everyone as anonymous users. Note that anonymous users — the default users in Linux systems — have access only to public server content. Note: This permission setting applies exclusively to file system access via the NFS protocol. File systems using the SMB/CIFS protocol do not support this setting, and the configuration will not be effective. |
| Priority | Priority is defined as an integer from 1 to 100, where a smaller number represents higher priority. Higher-priority rules override those with lower priorities. The default value is 1, indicating the highest priority. Currently, multiple rules cannot share the same priority level. |
Apply permission group rules
Choose the file system for configuring a permission group, visit its details page, and bind permission groups to specific mount targets. Two configuration methods are currently supported:
- Choose a pre-configured permission group during the creation of a mount target.
- By default, the permission group is applied when creating a mount target. To make changes, click "Modify Permission Group" in the mount target information list to update the configuration.
