Users and Permissions

Administrators use individual accounts and groups to control who can connect to ExaVault and what each user can access.

Use Users for individual account creation, expiration, disabling, deletion, and offboarding. Use Groups to collect accounts that need the same access. Folder Permissions explains the permissions those accounts and groups receive.

File Access Models

Normal ExaVault installations use one shared file system. Each user's Home Directory becomes that user's virtual root, and Folder Permissions control what the user can see and do inside it.

Legacy sites using HyperPrivacy Mode have a different model. Each user has a separate file system, and users exchange access through Sharing.

Do not apply normal folder-permission precedence rules to HyperPrivacy shares. The two models calculate access differently.

Authentication and Security

Account authentication is documented separately from account and permission administration. Authentication and Identity covers two-factor authentication, SSO, SAML, SCIM, Active Directory, LDAP, and login failures.

For account design, credential ownership, and least-privilege guidance, see User Security Practices.