Security and Access

Access Keys

The Access Keys or Service Accounts section displays all Access Keys associated to the authenticated user. The summary list of access keys that already exist for a particular user includes the access key, expiration, status, name, and description.

Access Keys support providing applications authentication credentials which inherit permissions from the “parent” user.

For deployments using an external identity manager such as Active Directory or an OIDC-compatible provider, access keys provide a way for users to create long-lived credentials.

• You can select the access key row to view its custom policy, if one exists.

  You can create or modify the policy from this screen. Access key policies cannot exceed the permissions granted to the parent user.

• You can create a new access key by selecting Create access key.

  The Console auto-generates an access key and password. You can select the eye icon on the password field to reveal the value. You can override these values as needed.

  You can set a custom policy for the access key that further restricts the permissions granted to users authenticating with that key. Select Restrict beyond user policy to open the policy editor and modify as necessary.

  Ensure you have saved the access key password to a secure location before selecting Create to create the access key. You cannot retrieve or reset the password value after creating the access key.

  To rotate credentials for an application, create a new access key and delete the old one once the application updates to using the new credentials.

Policies

The Policies section displays all policies on the MinIO deployment. The Policies section allows you to create, modify, or delete policies.

Policies define the authorized actions and resources to which an authenticated user has access. Each policy describes one or more actions a user, group of users, or access key can perform or conditions they must meet.

The policies are JSON formatted text files compatible with Amazon AWS Identity and Access Management policy syntax, structure, and behavior. Refer to Policy Based Action Control for details on managing access in MinIO with policies.

This section or its contents may not be visible if the authenticated user does not have the required administrative permissions.

• Select + Create Policy to create a new MinIO Policy.

• Select the policy row to manage the policy details.

  The Summary view displays a summary of the policy.

  The Users view displays all users assigned to the policy.

  The Groups view displays all groups assigned to the policy.

  The Raw Policy view displays the raw JSON policy.

Use the Users and Groups views to assign a created policy to users and groups, respectively.

Identity

The Identity section provides a management interface for MinIO-Managed users.

The section contains the following subsections. Some subsections may not be visible if the authenticated user does not have the required administrative permissions.