Unified Data Vault authenticates users through Access Key and Secret Key pairs. Users map to tenants, enabling secure S3 operations with role-based, multi-tenant access controls.
Understanding S3 User Role
The S3 User Role is a predefined role automatically assigned to users and user groups with the following permissions:
- S3_putObject - Upload objects to the vault
- S3_getObject - Download objects from the vault
- S3_listBucket - List objects in the vault
- S3_deleteObject - Delete objects from the vault
By default, the S3 User Role is assigned to all users and user groups added during vault creation. You can create custom roles by combining Commvault permissions with S3 permissions. See Managing Roles.
Add Users to a Vault
Grant users or user groups access to an existing Unified Data Vault:
-
From the Command Center navigation pane, go to Manage > Infrastructure.
-
Click the Unified Data Vault tile.
-
Click the vault you want to manage.
-
Click the Configuration tab.
-
In the Security section, click Edit (pencil icon).
-
In the User/Group box, search for and select the user or user group.
-
From the Roles list, select S3 User.
-
Click Add, then click Save.
Get Access Keys
Access keys are required to authenticate with the vault for S3 operations.
Rotate Access Keys
Regularly rotating access keys enhances security:
-
From the Command Center navigation pane, go to Manage > Infrastructure.
-
Click the Unified Data Vault tile.
-
Click the vault you want to manage.
-
In the upper-right corner, click the three-dot menu, then click Rotate keys.
-
Click OK to confirm.
New access keys are generated and old keys are immediately invalidated.
Note
After rotating keys, update any applications or scripts using the old credentials. Old keys will no longer authenticate.
Remove Users from a Vault
Revoke user access to a Unified Data Vault:
-
From the Command Center navigation pane, go to Manage > Infrastructure.
-
Click the Unified Data Vault tile.
-
Click the vault you want to manage.
-
Click the Configuration tab.
-
In the Security section, click Edit (pencil icon).
-
Locate the user in the User/group list.
-
Click the X button next to the user.
-
Click Save.