---
title: "HA-NAS - Managing ACLs via API"
description: "Find out how to manage HA-NAS access using the OVHcloud API"
url: https://docs.ovhcloud.com/en/guides/storage-and-backup/file-storage/ha-nas/nas-manage-acls
lang: en
lastUpdated: 2022-07-20
---
# HA-NAS - Managing ACLs via API

## Objective

The OVHcloud HA-NAS service allows you to manage file storage that can be accessed over a network.

**This guide explains how to manage the ACL of a HA-NAS partition via the OVHcloud API.**

## Requirements

- An OVHcloud [HA-NAS service](https://www.ovhcloud.com/en-gb/storage-solutions/nas-ha/)
- Consulting the [OVHcloud API first steps guide](/en/guides/manage-and-operate/api/first-steps.md) to familiarise yourself with the OVHcloud APIv6

## Instructions

All API routes in this guide are available in the section _/dedicated/nasha_: [https://api.ovh.com/console/#/dedicated/nasha](https://api.ovh.com/console/#/dedicated/nasha).

:::info
When using the API, all fields marked with an asterisk (\*) are required.
:::

### Retrieving information about your service

All your active services can be retrieved by using the following route:


🇪🇺EU▾

[GET/dedicated/nasha](https://eu.api.ovh.com/console/?section=/dedicated/nasha&branch=v1#get-/dedicated/nasha)

:::warning
Access is denied by default unless granted via the ACL. Only IP addresses attached to your OVHcloud services can be added.
:::

### Retrieving the ACL of a partition

To retrieve the IP addresses that can access the partition, use the following route:


🇪🇺EU▾

[GET/dedicated/nasha/{serviceName}/partition/{partitionName}/access](https://eu.api.ovh.com/console/?section=/dedicated/nasha&branch=v1#get-/dedicated/nasha/-serviceName-/partition/-partitionName-/access)

| Parameter       | Required | Description                              |
| --------------- | -------- | ---------------------------------------- |
| `serviceName`   | Yes      | The internal name of your HA-NAS service |
| `partitionName` | Yes      | Name of the partition                    |

### Retrieving all eligible IP addresses

You can verify the IP addresses that are eligible for access via the following API calls:


🇪🇺EU▾

[GET/dedicated/nasha/{serviceName}/partition/{partitionName}/authorizableBlocks](https://eu.api.ovh.com/console/?section=/dedicated/nasha&branch=v1#get-/dedicated/nasha/-serviceName-/partition/-partitionName-/authorizableBlocks)

| Parameter       | Required | Description                              |
| --------------- | -------- | ---------------------------------------- |
| `serviceName`   | Yes      | The internal name of your HA-NAS service |
| `partitionName` | Yes      | Name of the partition                    |

### Adding an ACL entry

To create a new ACL entry that will allow you to connect to your partition, use the following route:


🇪🇺EU▾

[POST/dedicated/nasha/{serviceName}/partition/{partitionName}/access](https://eu.api.ovh.com/console/?section=/dedicated/nasha&branch=v1#post-/dedicated/nasha/-serviceName-/partition/-partitionName-/access)

| Parameter       | Required | Description                                               |
| --------------- | -------- | --------------------------------------------------------- |
| `serviceName`   | Yes      | The internal name of your HA-NAS service                  |
| `partitionName` | Yes      | Name of the partition                                     |
| `ip`            | Yes      | The IP address or range to be granted access              |
| `type`          | Yes      | ACL access type for this entry: _readonly_ or _readwrite_ |

:::info
Use CIDR notation for IP ranges, for example: 192.0.2.0/24.
:::

### Removing an ACL entry

To delete an IP address or address range from the ACL, use the following route:


🇪🇺EU▾

[DELETE/dedicated/nasha/{serviceName}/partition/{partitionName}/access/{ip}](https://eu.api.ovh.com/console/?section=/dedicated/nasha&branch=v1#delete-/dedicated/nasha/-serviceName-/partition/-partitionName-/access/-ip-)

| Parameter       | Required | Description                                 |
| --------------- | -------- | ------------------------------------------- |
| `serviceName`   | Yes      | The internal name of your HA-NAS service    |
| `partitionName` | Yes      | Name of the partition                       |
| `ip`            | Yes      | The IP address or range to be denied access |

## Go further

[Mount your NAS via NFS share](/en/guides/storage-and-backup/file-storage/ha-nas/nas-nfs.md)

[Mount your NAS on Windows Server via CIFS](/en/guides/storage-and-backup/file-storage/ha-nas/nas-cifs.md)

If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](https://www.ovhcloud.com/en-gb/professional-services/) to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.

Join our [community of users](https://community.ovhcloud.com/).