---
title: "Enterprise File Storage - Managing volume ACLs"
description: "Manage Enterprise File Storage volume ACLs using the OVHcloud API"
url: https://docs.ovhcloud.com/en/guides/storage-and-backup/file-storage/enterprise-file-storage/netapp-volume-acl
lang: en
lastUpdated: 2021-10-27
---
# Enterprise File Storage - Managing volume ACLs

## Objective

In this tutorial, we will provide an overview of how to manage ACLs for OVHcloud Enterprise File Storage volumes.

**Learn how to list ACLs, create a new ACL and remove an ACL using the OVHcloud API.**

## Requirements

- An OVHcloud Enterprise File Storage volume
- You should be logged in to the [OVHcloud API](https://api.ovh.com)

## Basics

Volume ACLs allow to authorise or restrict access to a volume.

:::warning
By default, all access to a newly created volume is restricted. An ACL has to be created in order to allow access.
:::

Using ACLs, you can allow an IP or range of IP addresses (CIDR notation) to access a volume.

## Instructions

All API routes used for this tutorial are available under the _/storage_ section here: [https://api.ovh.com/console/#/storage](https://api.ovh.com/console/#/storage).

:::info
While using the API, all fields marked with an asterisk (\*) are required.
:::

### Listing existing ACLs

All existing ACLs for a volume can be retrieved using the following route:


🇪🇺EU▾

[GET/storage/netapp/{serviceName}/share/{shareId}/acl](https://eu.api.ovh.com/console/?section=/storage&branch=v1#get-/storage/netapp/-serviceName-/share/-shareId-/acl)

| Parameter     | Required | Description |
| ------------- | -------- | ----------- |
| `serviceName` | Yes      | Service ID  |
| `shareId`     | Yes      | Volume ID   |

Replace `serviceName` with the ID of your service and `shareId` with your volume ID.

You should have no ACLs by default.

### Allowing access to a volume using an ACL

To create a new ACL, use the following route:


🇪🇺EU▾

[POST/storage/netapp/{serviceName}/share/{shareId}/acl](https://eu.api.ovh.com/console/?section=/storage&branch=v1#post-/storage/netapp/-serviceName-/share/-shareId-/acl)

| Parameter                        | Required | Description                                                             |
| -------------------------------- | -------- | ----------------------------------------------------------------------- |
| `serviceName`                    | Yes      | Service ID                                                              |
| `shareId`                        | Yes      | Volume ID                                                               |
| `NetAppShareACLRule.accessLevel` | Yes      | ACL access level. Can be **rw** (read and write) or **ro** (read-only). |
| `NetAppShareACLRule.accessTo`    | Yes      | IP address or a range of IP addresses in CIDR notation.                 |

Replace `serviceName` with the ID of your service and `shareId` with your volume ID.

Choose the `accessLevel` you want to allow: either `ro` (read-only) or `rw` (read and write).

Finally, replace `accessTo` with the IP address from which you want to authorize connections.

### Removing an ACL

Removing an ACL will prevent all further access from the IP adresses specified by it.

To remove an ACL, use the following route:


🇪🇺EU▾

[DELETE/storage/netapp/{serviceName}/share/{shareId}/acl/{aclRuleId}](https://eu.api.ovh.com/console/?section=/storage&branch=v1#delete-/storage/netapp/-serviceName-/share/-shareId-/acl/-aclRuleId-)

| Parameter     | Required | Description |
| ------------- | -------- | ----------- |
| `serviceName` | Yes      | Service ID  |
| `shareId`     | Yes      | Volume ID   |
| `aclRuleId`   | Yes      | ACL ID      |

Replace `serviceName` with the ID of your service and `shareId` with your volume ID.

You can get the `aclRuleId` either from the ACL creation body response or by listing existing ACLs for your volume.

## Go further

If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](https://www.ovhcloud.com/en-gb/professional-services/) to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.

Join our [community of users](https://community.ovhcloud.com/).