Domain users require an assigned namespace to perform object user operations
You must add (assign) domain users into a namespace if you want these users to perform ECS object user operations. To access the ECS object store, object users and Namespace Administrators must be assigned to a namespace. You can add an entire domain of users into a namespace, or you can add a subset of the domain users into a namespace by specifying a particular group or attribute associated with the domain.
A domain can provide users for multiple namespaces. For example, you might decide to add a set of users such as the Accounts department in the
yourco.com domain into Namespace1, and a set of users such as the Finance department in the
yourco.com domain into Namespace2. In this case, the
yourco.com domain is providing users for two namespaces.
An entire domain, a particular set of users, or a particular user cannot be added into more than one namespace. For example, the
yourco.com domain can be added into Namespace1, but the domain cannot also be added into Namespace2.
The following example shows that a System or Namespace Administrator has added into a namespace a subset of users in the
yourco.com domain; the users that have their Department attribute = Accounts in Active Directory. The System or Namespace Administrator has added the users in the Accounts department from this domain into a namespace by using the
Edit Namespace page in the ECS Portal.
Figure 1. Adding a subset of domain users into a namespace using one AD attribute
The following example shows a different example where the System or Namespace Administrator is using more granularity in adding users into a namespace. In this case, the System or Namespace Administrator has added the members in the
yourco.com domain who belong to the Storage Admins group with the Department attribute = Accounts AND Region attribute = Pacific, OR belong to the Storage Admins group with the Department attribute = Finance.
Figure 2. Adding a subset of domain users into a namespace using multiple AD attributes