Dell Storage Manager 2020 R1 Administrator's Guide

Managing ACLs or SLPs on an SMB Share

The FluidFS cluster supports two levels of access control to SMB shares, files, and folders:

• Access control lists (ACLs): Govern access to specific files and folders. The administrator can control a wide range of operations that users and groups can perform.
• Share-level permissions (SLPs): Govern access to entire shares. The administrator controls only read, change, or full access to an entire share.

SLPs are limited because they only address full control, modify, and read rights for any given user or group at the SMB share level. ACLs control many more operations than only read/change/full access. Use the default setting for SLP (authenticated users has full control) and use ACLs to control access to the SMB share, unless a specific requirement for SLPs cannot be accomplished using ACLs.

A Windows administrator should follow the best practices defined by Microsoft for ACLs and SLPs.