This topic has been marked solved and closed to new posts due to inactivity. We hope you'll join the conversation by posting to an open topic or starting a new one.
May I know if the web admin page management allows to set a role who can only manage the snapshots or monitor the NAS performance, but cannot browser or download the files under shares?
But to answer your question, there is no such user type on a ReadyNAS.
Yeah. There is no way to limit what an admin can access.
@WLauHK - it might be helpful if you gave us more details on what you need to accomplish.
If you need to ensure that some files/folders are kept completely private, then setting up an iSCSI LUN, and putting iSCSI clients on the PCs would accomplish that. TrueCrypt containers would be another way. Those approaches work because the encryption key for the storage repository is stored in the clients, and is not on the NAS. One aspect is that the files can't be shared - only one user can access the repository at a time.
If "managing snapshots" means being able to browse them, then that user will effectively have access to all files except those in shares without snapshots. And I'm not sure if it's even possible in BTRFS to allow other management without the ability to browse them (for file restoration purposes).
But to answer your question, there is no such user type on a ReadyNAS. There are Linux based tools you can install to help monitor the NAS and have them put their output in a share available to specific users or even send them to another device on the network. I use HDSentinel in a way similar to that because the GUI does not give me all the drive info for my non-Netgear SAS expansion chassis. And there are also built-in ones (like rnutil and BTRFS tools) you can use in the same way, but you have to set all that up via SSH and scripts and schedule them.
Some useful command for that:
rnutil create_system_log -o [path_and_name_of_file]>.zip
df -h >[path_and_name_of_file].txt
btrfs fi usage -T / >>[path_and_name_of_file].txt
btrfs fi usage -T /data >>[path_and_name_of_file].txt
btrfs fi show >>[path_and_name_of_file].txt
rnutil get_disk_info >>[path_and_name_of_file].txt
I have the file names created based on the time and date and include commands later in the script that clean out old stuff. , I also send the reports to another NAS via rsync so I have the reports stored elsewhere if the NAS quits working.
But, a lot of folks get a NAS instead of a generic Linux server because they don't want to deal with this type of stuff.
But to answer your question, there is no such user type on a ReadyNAS.
Yeah. There is no way to limit what an admin can access.
@WLauHK - it might be helpful if you gave us more details on what you need to accomplish.
If you need to ensure that some files/folders are kept completely private, then setting up an iSCSI LUN, and putting iSCSI clients on the PCs would accomplish that. TrueCrypt containers would be another way. Those approaches work because the encryption key for the storage repository is stored in the clients, and is not on the NAS. One aspect is that the files can't be shared - only one user can access the repository at a time.
If you do decide to look at VeraCrypt containers as an option, be sure to turn "strict sync" off in any share containing them. Strict Sync significantly hinders write operations to VeraCrypt containers.
