An Access Grant is a security envelope that contains a satellite address, a restricted API Key, and a restricted path-based encryption key—everything an application needs to locate an object on the network, access that object, and decrypt it.
The Access Grant screen allows you to create or delete Access Grants, and generate credentials for the Storj DCS S3-compatible Gateway from an Access Grant.
Let's start with creating an Access Grant. Click the Create Access Grant Button.
Give your Access Grant a name:
Set any access restrictions you want encoded into your Access Grant. Through the Satellite Admin Console, you can set basic restrictions on your Access Grant. You can get more sophisticated using the CLI and add further, more granular restrictions, for example, at the path prefix level within a Bucket.
Next, enter an encryption passphrase for your Access Grant. Note that this encryption passphrase is handled by the browser and is not stored by the Satellite.
Copy or download your Access Grant. Do not lose it, you only have one opportunity to do so.
This Access Grant can now be used to configure tools like the Storj DCS CLI, libuplink library, or apps like Rclone, FileZilla or Restic. You can also generate credentials for the Storj DCS S3-compatible Gateway.
When you generate credentials for the Storj DCS S3-compatible Gateway, the Admin Console will register your Access Grant with the Gateway auth service and display the credentials required to configure your client app to work with the Storj DCS S3-compatible Gateway.
To Delete an Access Grant, select an Access Grant and choose Remove Selected:
Then confirm that you want to delete the Access Grant.
You don't need to know everything in the whitepaper about our Access Grants, macaroon-based API Keys or our encryption implementation, but if you understand the general principles, you'll find these are some very sophisticated (but easy to use) tools for creating more secure and private applications.
Next we'll cover adding and removing other developers to and from your project.