configure-unix-permissions-change-ownership-mode.md

title	description	services	documentationcenter	author	manager	editor	ms.assetid	ms.service	ms.workload	ms.tgt_pltfrm	ms.topic	ms.date	ms.author
Configure Unix permissions and change ownership mode for Azure NetApp Files NFS and dual-protocol volumes | Microsoft Docs	Describes how to set the Unix permissions and the change ownership mode options for Azure NetApp Files NFS and dual-protocol volumes.	azure-netapp-files		b-hchen				azure-netapp-files	storage	na	how-to	04/13/2022	anfdocs

Configure Unix permissions and change ownership mode for NFS and dual-protocol volumes

For Azure NetApp Files NFS volumes or dual-protocol volumes with the Unix security style, you have the option to set the Unix permissions and the change ownership mode (Chown Mode) options. You can specify these settings during volume creation or after volume creation.

Unix permissions

The Azure NetApp Files Unix Permissions functionality enables you to specify change permissions for the mount path. The setting does not apply to the files under the mount path.

The Unix permissions setting is set to 0770 by default. This default setting grants read, write, and execute permissions to the owner and the group, but no permissions are granted to other users.

You can specify a custom Unix permissions value (for example, 0755) to give the desired permission to the owner, group, or other users.

Change ownership mode

The change ownership mode (Chown Mode) functionality enables you to set the ownership management capabilities of files and directories. You can specify or modify the setting under a volume's export policy. Two options for Chown Mode are available:

• Restricted (default) - Only the root user can change the ownership of files and directories.
• Unrestricted - Non-root users can change the ownership for files and directories that they own.

Considerations

• The Unix permissions you specify apply only for the volume mount point (root directory).
• You can modify the Unix permissions on the source volume but not on the destination volume that is in a cross-region replication configuration.

Steps

1. The Unix permissions and change ownership mode features are currently in preview. Before using these features for the first time, you need to register the features:

   1. Register the Unix permissions feature:

      Register-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFUnixPermissions
      

   2. Register the change ownership mode feature:

      Register-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFChownMode
      

   3. Check the status of the feature registration:

      [!NOTE] The RegistrationState may be in the Registering state for up to 60 minutes before changing to Registered. Wait until the status is Registered before continuing.

      Get-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFUnixPermissions  
      Get-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFChownMode
      

   You can also use Azure CLI commands az feature register and az feature show to register the feature and display the registration status.

2. You can specify the Unix permissions and change ownership mode (Chown Mode) settings under the Protocol tab when you create an NFS volume or create a dual-protocol volume.

   The following example shows the Create a Volume screen for an NFS volume.

   

3. For existing NFS or dual-protocol volumes, you can set or modify Unix permissions and change ownership mode as follows:

   1. To modify Unix permissions, right-click the volume, and select Edit. In the Edit window that appears, specify a value for Unix Permissions.
      

   2. To modify the change ownership mode, click the volume, click Export policy, then modify the Chown Mode setting.
      

Next steps

• Create an NFS volume for Azure NetApp Files
• Create a dual-protocol volume for Azure NetApp Files
• Configure export policy