MinIO supports multiple long term users in addition to default user created during server startup. New users can be added after server starts up, and server can be configured to deny or allow access to buckets and resources to each of these users. This document explains how to add/remove users and modify their access rights.

## Get started

In this document we will explain in detail on how to configure multiple users.

### 1. Prerequisites

        }
    }

    /**
     * Validate buffer access bounds
     *
     * @param buffer the buffer
     * @param offset offset to access
     * @param length length to read
     * @throws SmbException if access would exceed bounds
     */
    public void validateBufferAccess(byte[] buffer, int offset, int length) throws SmbException {

        // Determine lease level based on access requirements
        // Check for delete access separately as it may require special handling
        final boolean hasDeleteAccess = (access & DELETE) != 0;
        final boolean hasWriteAccess =
                (access & (GENERIC_WRITE | FILE_WRITE_DATA | FILE_APPEND_DATA | FILE_WRITE_ATTRIBUTES | FILE_WRITE_EA)) != 0;

    /**
     * Enable other opens for read access
     */
    public static final int FILE_SHARE_READ = 0x1;

    /**
     * Enable other opens for write access
     */
    public static final int FILE_SHARE_WRITE = 0x2;

    /**
     * Enable other opens for delete access
     */
    public static final int FILE_SHARE_DELETE = 0x4;

    /**

```
cat ${HADOOP_CONF_DIR}/core-site.xml | kv-pairify | grep "s3a"

fs.s3a.access.key=minio
fs.s3a.secret.key=minio123
fs.s3a.path.style.access=true
fs.s3a.block.size=512M
fs.s3a.buffer.dir=${hadoop.tmp.dir}/s3a
fs.s3a.committer.magic.enabled=false
fs.s3a.committer.name=directory
fs.s3a.committer.staging.abort.pending.uploads=true

        return flags;
    }

    /**
     * Gets the access mask hint for optimizing lease handling
     * @return the access mask hint
     */
    public int getAccessMaskHint() {
        return accessMaskHint;
    }

    /**
     * Gets the share access hint for optimizing lease handling
     * @return the share access hint
     */
    public int getShareAccessHint() {

    assertThat(request.tag(Any::class.java)).isNull()
    assertThat(request.tag(UUID::class.java)).isNull()
    assertThat(request.tag(String::class.java)).isNull()

    // Alternate access APIs also work.
    assertThat(request.tag<String>()).isNull()
    assertThat(request.tag(String::class)).isNull()
  }

  @Test
  fun defaultTag() {
    val tag = UUID.randomUUID()
    val request =

    }

    SmbFileInputStream(final SmbFile file, final int openFlags, final int access, final int sharing, final boolean unshared)
            throws SmbException {
        this.file = file;
        this.unsharedFile = unshared;
        this.openFlags = openFlags;
        this.access = access;
        this.sharing = sharing;

        try (SmbTreeHandleInternal th = file.ensureTreeConnected()) {

 * addresses, and lengths for direct memory access operations.
 */
public class RdmaChannelInfo {

    private final Smb2RdmaTransform transform;

    /**
     * Create new RDMA channel info
     *
     * @param remoteKey remote memory key for RDMA access (token)
     * @param address remote memory address (offset)
     * @param length length of the memory region

        connection.connect();
        return connection;
    }

    @Override
    public RdmaMemoryRegion registerMemory(ByteBuffer buffer, EnumSet<RdmaAccess> access) throws IOException {
        // TCP doesn't need real memory registration
        return new TcpMemoryRegion(buffer, access);
    }

    @Override
    public String getProviderName() {
        return "TCP Fallback";
    }

    @Override