NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Cannot set ReadyCloud user permissions on ReadyNAS 6.10.6
Hi all,
I have recently spent hours attempting to set desired permissions for my ReadyCloud account on my NAS without success. I am able to create local users/groups successfully and assign read-only or read-write access appropriately, however I simply cannot set my ReadyCloud account access to read-only.
I work in IT support and am extremely conscious of the ramifications of password breaches/account dumps/account hacks and while I would like to have the ability to read/access my data remotely, I do not UNDER ANY CIRCUMSTANCES want any files to be able to be deleted or written remotely through a ReadyCloud account. This should only occur from the local network where the ReadyNAS resides, in the exact same way that the ReadyNAS admin page is only accessible locally.
I have so far tried the following:
- I cannot untick the 'read/write' check box under 'Network Access' setting for the ReadyCloud user account, nor can I check the 'read only' check box.
- 'Read only' check box is not available for the ReadyCloud user account under 'File Access' settings, and 'read/write' is greyed out.
- I have attempted to set the user group 'ReadyCloud Users' to only 'Read', 'Read & Execute', and 'List Folder Contents' on the share through Windows File Security, however the delete option is still available in ReadyCloud.
- I have attempted to explicitly set the ReadyCloud user account (email address as the username) to only 'Read', 'Read & Execute', and 'List Folder Contents' on the share through Windows File Security, however the delete option is still available in ReadyCloud.
- I deleted all permissions on the share and left only one explicit local NAS user account with 'Full Control'. The ReadyCloud account was STILL able to access the folder, and subsequently delete the folder.
The following article https://kb.netgear.com/24927/ReadyCLOUD-Permissions explains that "By default, when you grant access to ReadyCLOUD users, those users can view all shares on your ReadyNAS system unless the permission settings on the shares restrict read and write permissions", but does not give me clear instructions to restrict share permissions to read-only for ReadyCloud users.
I have also attempted to locate the 'Permissions' menu described in the following article so that I might be able to set ReadyCloud account to 'read-only' however I simply cannot find the permissions menu at all: https://kb.netgear.com/23790/How-do-I-set-the-ReadyCLOUD-access-rights-for-a-shared-folder-on-my-ReadyNAS-OS-6
Any help or links to articles that may assist with setting ReadyNAS share access to read-only for all ReadyCloud users would be much appreciated!!
Thanks,
Ben
3 Replies
Replies have been turned off for this discussion
If your users use local accounts when local and ReadyCloud for remote access, my suggestion is to dump ReadyCloud. That configuration requires each user has a separate account for ReadyCloud and local, which can be quite a nightmare. Using a VPN would give them exactly the same rights remotely as locally since they would use the same logon.
If you want to stick with ReadyCloud, I don't use it and can't help. But there are those who do on the forum who may be able to help.
You didn't say, but is the NAS added to Active Directory? It could make a difference in the response.
I am using ReadyCLOUD, but I do not consider myself "an expert" on this. What I will say, it's very different to managing local users.
OK, let me share my experience, as I it may trigger some useful thoughts:
- Once ReadyCLOUD is enabled in the local dashboard, you then set up your ReadyCLOUD admin account through device discovery. It seems you have done this.
- Your ReadyCLOUD admin account is able to view/access/read/write all share folders on your ReadyNAS. As far as I can tell, you have no ability to manage the level of access available to your ReadyCLOUD admin account.
- For your ReadyCLOUD user accounts, you can manage their access fully, including hiding shares entirely via the 'Manage' tab on the ReadyCLOUD portal.
So my take is that with ReadyCLOUD enabled, you unfortunately always allow the admin account full access via the ReadyCLOUD web.
Hi, thanks for the details, been having the same issue..will be the trying your recommendations and will let you know if it works..hope it will
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
