Setting the systemwide permission mask for an HCP system

Before you begin

To view the Permissions page, you need the monitor or administrator role. To set the systemwide permission mask, you need the administrator role.

Procedure

  1. On the Permissions page, select the permissions you want to include in the systemwide permission mask:

    • Read

      Lets users:

      • Read and retrieve objects, including object metadata (system metadata, custom metadata, and ACLs)
      • List directory contents
      • View namespace information

    • Write

      Lets users:

      • Add objects to a namespace.
      • Modify system metadata. For the default namespace, this includes holding and releasing objects. For HCP namespaces, these operations also require privileged permission.
      • Add or replace custom metadata.
      • Add or replace ACLs.
      • Change object owners.
      • View namespace information

    • Delete

      Lets users:

      • Delete objects, custom metadata, and ACLs from a namespace
      • View namespace information

    • Purge

      Lets users:

      • Delete all versions of an object with a single operation. For users to perform purge operations, delete operations must also be allowed.
      • View namespace information.

      Selecting Purge automatically selects Delete.

    • Privileged

      Lets users:

      • Delete or purge objects that are under retention. For users to perform privileged delete operations, delete operations must also be allowed. For users to perform privileged purge operations, delete and purge operations must also be allowed.
      • Hold and release objects in HCP namespaces. For users to perform hold and release operations in these namespaces, write operations must also be allowed.
      • View namespace information.

    • Search

      Lets users use the HCP metadata query API and the HCP System Management Console to query or search namespaces. For users to query or search a namespace, read operations must also be allowed.

      Selecting Search automatically selects Read.

  2. Click Update Settings.