}

	if company.ID == 0 {
		t.Fatalf("Company's ID should be created")
	}

	if err := DB.Model(&user2).Association("Manager").Append(manager); err != nil {
		t.Fatalf("Error happened when append Manager, got %v", err)
	}

	if manager.ID == 0 {
		t.Fatalf("Manager's ID should be created")
	}

	user.Company = company
	user.Manager = manager
	user.CompanyID = &company.ID

      "index" : {
        "creation_date" : "1509021057304",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "gofu2g1ATH6L2rVweOWmtg",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.thumbnail_queue"
      }
    }
  }

      "index" : {
        "creation_date" : "1509021055837",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "34AXOK0ITy6U7fzGItZJsQ",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.related_content"
      }
    }
  }

	objLayer, disks, err := prepareTestBackend(ctx, instanceType)
	if err != nil {
		b.Fatalf("Failed obtaining Temp Backend: <ERROR> %s", err)
	}
	// cleaning up the backend by removing all the directories and files created on function return.
	defer removeRoots(disks)

	// uses *testing.B and the object Layer to run the benchmark.
	runPutObjectPartBenchmark(b, objLayer, objSize)
}

```
mc admin user add myminio newuser newuser123
```

Once the user is successfully created you can now apply the `getonly` policy for this user.

```
mc admin policy attach myminio getonly --user=newuser
```

### 3. Create a new group

```
mc admin group add myminio newgroup newuser
```

Once the group is successfully created you can now apply the `getonly` policy for this group.

```

      "index" : {
        "creation_date" : "1509021055516",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "Vn_Ry5JPRSet5M3Cg2D17w",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.path_mapping"
      }
    }
  }

          }
        },
        "creation_date" : "1509021051038",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "H4zzbuU5SJWFOLRnofoiNw",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.data_config"
      }
    }
  }

          }
        },
        "creation_date" : "1509021052202",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "KVOz6G2oR1S8lU5BvNyQrg",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.elevate_word"
      }
    }
  }

token. Applications can use these temporary security credentials to sign calls to MinIO API operations. The policy applied to these temporary credentials is inherited from the MinIO user credentials. By default, the temporary security credentials created by AssumeRole last for one hour. However, use the optional DurationSeconds parameter to specify the duration of the credentials. This value varies from 900 seconds (15 minutes) up to the maximum session duration of 365 days.

## API Request...

      "index" : {
        "creation_date" : "1509021057587",
        "number_of_shards" : "5",
        "number_of_replicas" : "1",
        "uuid" : "8lg38XiCSh-kJgbOgYzMFA",
        "version" : {
          "created" : "6000051"
        },
        "provided_name" : "fess_config.web_authentication"
      }
    }
  }